THE  SIMPLE  LIFE 

Cisco  tries  to  make  it  easier  for  users  to 
manage  its  Catalyst  6500  switches,  page  7 


STAYING  ALIVE 


Share  President  Robert  Rosen  says  the  50-year-old 
mainframe  user  group  still  has  sonie  jife  left  ih  it.  j?a$e  i4- 
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LOCKING 


DOWN 


Instant  messaging 

is  in  use  at  more  than 
80%  of  large  corp¬ 
orations,  whether  the 
IT  department  likes 
it  or  not.  Here’s  a  run¬ 
down  of  strategiesfor 
managingthesecurity 
risks.  Page  31 


VPNs  Gain  With  Users; 
Frame  Relay  Declines 

IP-based  virtual  networks  tapped  to  improve  security,  support  new  apps 


BY  MATT  HAMBLEN 

Corporate  purchases  of  IP  vir¬ 
tual  private  network  services 
continue  to  surge  forward,  a 
trend  that  analysts  said  is  be¬ 
ing  accompanied  by 
a  shift  away  from  the 
use  of  frame-relay 
technology  to  carry 
network  traffic. 

IT  executives  who 
are  rolling  out  IP 
VPN  connections 
said  last  week  that 
the  networks  pro¬ 
vide  better  security 


than  dial-up  systems  and 
many  other  current  approach¬ 
es.  They  added  that  VPNs  also 
can  help  keep  networking 
costs  in  check,  allowing  them 
to  vastly  increase 
bandwidth  to  handle 
new  applications. 

For  example,  The 
Stride  Rite  Corp.,  a 
footwear  retailer  in 
Lexington,  Mass.,  to¬ 
day  will  announce 
plans  to  deploy  an  IP 
VPN  connecting  264 
stores  nationwide. 


Microsoft  Delays  Team  Tool 
As  Users  Look  to  Collaborate 

IT  execs  face  need  to  link  dispersed  developers 


BY  HEATHER  HAVENSTEIN 

Microsoft  Corp.  last  week 
pushed  back  the  ship  date  of  a 
key  component  of  its  Visual 
Studio  2005  Team  System.  The 
delay  in  shipping  Team  Foun¬ 
dation  Server  postpones  Mi¬ 
crosoft’s  entry  into  a  burgeon¬ 
ing  market  for  collaborative 
software  that  can  link  devel¬ 
opers  in  far-flung  locations. 

Analysts  said  that  as  IT  op¬ 
erations  use  more  remote  de¬ 
velopers,  the  need  for  change 
and  configuration  manage¬ 
ment  tools,  version  control 
software  and  even  weblogging 
tools  is  growing. 

Team  Foundation  Server,  a 
server-based  product  that  sup¬ 
ports  integrated  version  con¬ 


trol,  reporting,  work  item 
tracking,  process  guidance  and 
automated  build  capabilities, 
will  ship  in  the  first  quarter 
of  2006  instead  of  on  Nov.  7, 
Microsoft  said.  The  remaining 
components  of  Visual  Studio 
2005  —  including  the  other 
pieces  of  Team  System  —  will 
still  ship  on  that  date,  accord¬ 
ing  to  Microsoft. 

Meanwhile,  the  company 
will  now  add  on  Nov.  7  a  third 
beta  release  of  Team  Founda- 
Microsoft,  page  48 


MORE  INSIDE 

Microsoft  changes  what  was  supposed 
to  be  a  free  service  pack  update  to  Virtual 
Server  2005  into  an  upgrade  that  some  ; 
users  may  have  to  pay  for.  Page  6 


The  new  network  will  replace 
dial-up  services  with  a  con¬ 
stant  VPN  connection  at  each 
store  and  upgrade  available 
bandwidth  from  56K  to 
384Kbit/sec.  or  more,  said 
Stride  Rite  CIO  Yusef  Akyuz. 

That  will  help  the  retailer 
accommodate  a  new  point- 
of-sale  system  and  added 

VPNs,  page  16 


Basel  IT  Cost 
Higher  Than 
Projected 

BY  LUCAS  MEARIAN 

For  the  largest  U.S.  banks,  an 
international  regulation  re¬ 
quiring  tighter  operational  risk 
controls  is  proving  to  be  far 
more  costly  than  expected  for 
IT,  according  to  users  and  ana¬ 
lysts  interviewed  last  week. 

The  new  Basel  Capital  Ac¬ 
cord,  or  Basel  II  framework, 
will  require  that  about  20  of 
the  nation’s  largest  banks  use 
IT  systems  to  measure  credit 
and  operational  risk  in  order 
to  ensure  that  they  have 
enough  capital  on  hand  to 
cover  their  risks. 

An  Accenture  Ltd.  survey  of 
large  U.S.  banks  released  last 
month  found  that  dozens  are 
spending  significant  sums  to 
comply  with  Basel  II.  Most  of 
the  respondents  said  they  also 
fear  that  the  strict  Basel  II 
conditions  will  only  slightly 

Basel,  page  48 


For  over  30  years,  Sterling  Commerce  has  led  the  industry  in  helping  successful  organizations  work  more 
effectively  with  suppliers,  subsidiaries  and  customers.  Now,  with  the  first  platform  to  meet  all  the  challenges  of 
real-world  multi-enterprise  collaboration,  Sterling  Commerce  can  help  your  organization  become  seamlessly 
integrated  with  trusted  business  partners.  You'll  achieve  end-to-end  visibility,  and  real-time  control  over  shared 
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Sterling  Commerce  leads  the  world  in  helping 
businesses  collaborate  with  their  partners. 


Of  course,  we've  had  a  30  year  head  start. 


business  processes,  so  you  can  make  faster,  better-informed  decisions  to  help  cut  costs  and  accelerate  time  to 
market.  Leading  analysts  uniformly  praise  our  technology  and  implementations.  And,  most  importantly,  a  majority 
of  the  world's  leading  companies  depend  on  us.  That's  a  tough  act  to  follow.  Contact  your  Sterling  Commerce 
representative  today.  Or  visit  us  at  www.sterlingcommerce.com 
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hp  Proliant  BL20p  G3  blade  server 


with  ProLiant  Essentials  Management  Software 

■  Up  to  2  Intel®  Xeon™  Processors  (3.60GHz/2MB)‘ 

•  High  density:  Up  to  48  servers  per  rack 

■  Flexible/Open:  Integrates  with  existing  infrastructure 

■  HP  Systems  Insight  Manager™:  Web-based  networked 
management  through  a  single  console 

•  Rapid  Deployment  Pack:  For  ease  of  deployment  and 
ongoing  provisioning  and  reprovisioning 

■  Integrated  Cisco  or  Nortel  switch  options 


The  HP  ProLiant  BL20p  G3  blade  server  with  the  Intel  '  Xeon™  Processor  simplifies  server  management.  In  fact,  it's 
so  simple,  you  can  even  manage  it  remotely  through  leading  Web  browsers  using  HP  i LO  technology.  And 
not  only  is  it  simple  to  manage,  it's  also  simple  to  monitor  and  set  up.  It  all  starts  with  the  Rapid  Deployment  Pack, 
giving  you  an  automated  setup  process  to  configure  and  deploy  servers  at  high  volume  and  a  rapid  pace. 
Then  HP  Systems  Insight  Manager™  gives  you  a  real-time  overview  of  system  performance,  even  alerting  you 
to  potential  problems  before  they  occur.  Plus,  you  can  bundle  it  with  the  HP  StorageWorks  MSA1500cs  to  make 
storing  your  data  simple,  scalable  and  affordable.  So  with  HP,  you  get  more  expertise  before  you  buy,  more 
technology  when  you  da  and  more  support  after.  Wherever  you  happen  to  be. 


HP  STORAGEWORKS  MSA1500cs 


Get  2TB  of  Storage  Free  ($2,800  Value)' 

•  Up  to  24TB  of  capacity  (96  250GB  SATA  drives) 
■  Up  to  16TB  of  capacity  (56  300GB  SCSI  drives) 

Ability  to  mix  SCSI  and  Serial  ATA  enclosures 
for  greater  flexibility 

•  2GB/1GB  Fibre  connections  to  host 


Download  a  free  IDC  white  paper: 

Reducing  Total  Cost  of  Ownership 
Through  the  Use  of  Blade  Systems. 

Save  $750  instantly 

on  <3  Hcde  enclosure  solution) 

See  V/eis  site  for  details. 


SMART  ADVICE  >  SMART  TECHNOLOGY  >  SMART  SERVICES 


Call  1-877-342-1779 
Click  hp.com/go/bladesmag19 
Visit  your  local  reseller 


1  i ;  Is  numbering  is  not  a  measurement  of  higher  performance.  2.  Receive  up  to  2TB  of  storage  free  with  purchase  of  HP  StorageWorks  Modular  Smart  Array  1500cs  devices.  Offer  valid  through  10/31/05, 3.  Save  $750  instantly  on  the  purchase  ot  a  BladeSystem  pCIass  1U  power  enclosure  solution.  Otter  valid 
throug  1 0/31/05.  All  oilers  available  Iran  HP  Direct  and  participating  resellers.  Prices  shown  are  HP  Direct  prices,  are  subject  to  change  and  do  not  include  applicable  state  and  local  sales  tax  or  shipping  to  recipient's  destination.  Reseller  prices  may  vary.  See  Web  site  for  full  details.  Photography  may  not  accurately 
represei  it  exact  configurations  priced.  Associated  values  represent  HP  published  list  price.  Intel,  Intel  Inside,  the  Intel  Inside  Logo  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  ©2005  Hewlett-Packard  Development  Company,  L.P, 
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Storage  by  the  Cluster 

In  the  Technology  section:  Start-up  vendors  are  leading 
the  way  on  clustered  storage  technology.  Users  like 
Russ  Miller  (left)  of  the  University  of  Buffalo  say  clus¬ 
tering  offers  increased  scalability  and  reliability  for  or¬ 
ganizations  with  large  storage  needs.  Page  21 


No  Strings  Attached 

In  the  Management  section:  Rent-A-Center’s 
flexible,  wireless  hiring  kiosks  have  saved  time 
and  money,  improved  hiring  and  inspired  further 
automation,  says  CTO  and  Premier  100  IT  Leader 
Tony  Fuller.  Page  36 
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6  Microsoft  now  plans  to 

charge  users  without  Software 
Assurance  for  the  first  up¬ 
grade  to  Virtual  Server  2005. 

7  Cisco  upgrades  its  Internet¬ 
working  Operating  System  to 
ease  switch  management. 

7  Ontario  will  take  back  control 
from  Accenture  of  a  welfare 
case  management  system  that 
critics  say  still  has  problems. 

12  New  York’s  Metropolitan 
Transportation  Authority  em¬ 
barks  on  a  $212  million  project 
involving  cameras,  sensors 
and  software  to  secure  the 
city’s  transit  system. 

12  The  Treasury  Department 

reopens  bids  for  a  $1  billion 
telecommunications  contract 
after  deciding  it  couldn’t  be 
handled  through  the  GSA. 

14  Oracle’s  10g  Collaboration 
Suite  ships  a  year  late  as  the 
vendor  tries  to  make  it  more 
competitive  with  products 
from  IBM  and  Microsoft. 

14  Q&A:  The  Share  user  group, 

which  focuses  primarily  on 
IBM  mainframes,  has  a  bright 
future  after  50  years,  says 
President  Robert  Rosen. 

15  Global  Dispatches:  Fujitsu 
sues  a  Taiwan-based  vendor 
of  memory  chips  for  patent 
infringement;  and  Motorola 
says  it  doesn’t  plan  to  manu¬ 
facture  products  in  India. 

16  Q&A:  Sun’s  storage  chief  says 

the  acquisition  of  StorageTek 
will  boost  his  sales  force. 


24  Up  to  Capacity.  Capacity 
planning  helps  companies 
locate  current  bottlenecks 
or  wasted  capacity,  as  well 
as  strategize  to  meet  future 
infrastructure  needs. 

27  QuickStudy:  Protocols.  These 
sets  of  formal  rules  describe 
how  devices  or  software  can 
exchange  information  across 
a  network. 

28  Security  Manager’s  Journal: 
Peers  Say  Cisco  Ended  Up 
Wearing  the  Black  Hat.  After 
the  Cisco  IOS  vulnerability 
flap  at  the  Black  Hat  confer¬ 
ence,  C.J.  Kelly  asks  some  of 
her  colleagues  what  they 
think  about  the  situation. 

MANAGEMENT 

31  Locking  Down  IM.  Like  it  or 
not,  instant  messaging  has 
reached  the  corporate  main¬ 
stream.  Here  are  steps  you 
can  take  to  enjoy  the  business 
benefits  while  mitigating 
the  risk. 

37  Who’s  Who  in  IT:  Fishing  in 
the  Data  Pool.  Systems  and 
programming  manager  Shawn 
Mahoney  talks  about  what 
he  does  to  help  his  business 
customers  reel  in  the  right 
information. 

40  Book  Reviews:  The  World  Is 
Flat.  Thomas  Hoffman  re¬ 
views  Pulitzer  Prize-winning 
columnist  Thomas  Friedman’s 
latest  effort,  as  well  as  books 
on  how  to  get  the  most  out  of 
your  team  and  how  to  handle 
tough  questions. 


18  Mark  Hall  notes  that  Google’s 
release  of  Desktop  2  and 
Desktop  Search  for  Enterprise 
has  rekindled  a  battle  for  the 
PC  user’s  desktop.  Naturally, 
most  of  the  battle  scars  will  be 
borne  by  IT. 

18  Dan  Gillmor  thinks  vendors 
are  keeping  too  much  control 
over  the  digital  content  of  our 
lives. 

19  Virginia  Robbins  isn’t  worried 
that  fewer  college  students 
are  majoring  in  computer 
science  these  days. 

29  Douglas  Schweitzer  says 
that  virtual  LANs  may  be 
the  answer  to  some  of  your 
company’s  wireless  security 
problems. 

42  John  Columbus  recognizes 
that  metrics  are  a  way  to  lead 
people  toward  a  goal.  But  be¬ 
fore  you  start,  make  sure 
you’re  using  the  right  num¬ 
bers  in  the  right  way. 

50  Frankly  Speaking:  Frank 
Hayes  has  heard  from  readers 
who  say  that  many  rural  and 
small  hospitals  won’t  be  able 
to  adopt  electronic  health 
records.  And  that,  he  says, 
could  undermine  the  benefit 
to  those  health  care  centers 
that  do  embrace  EHR. 
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QuickPoll  Results 


Should  the  federal  government  be 
recruiting  hackers  to  work  on  information 
security  programs? 


©  Take  this  week's  QuickPoll  at  www.computerworld.com. 

SOURCE:  COMPUTERWORLD  COM  NONSCIENT1FIC  SURVEY;  334  VOTES 

Viruses:  New  Weapon  of  Choice 
For  Disgruntled  Workers 

SECURITY:  Risk  Control  Strategies’  Paul 
Viollis  and  Doug  Kane  say  companies  need 
to  know  how  to  recognize  unhappy  employ¬ 
ees  who  might  deploy  viruses  on  the  network 
in  acts  of  sabotage.  ©  QuickLink  56282 


Is  the  Real  ID  Act  the  Real  Deal 
For  Better  Security? 

SECURITY:  Gary  Klinefelter,  vice  president  of 
technology  at  Fargo  Electronics,  examines 
some  of  the  issues  raised  over  the  Read 
ID  Act,  which  authorizes  the  first  national  ID 

card.  ©  QuickLink  55896 
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our  Web  site.  Also,  at  the  end  of 
each  story,  a  QuickLink  to  that 
story  online  facilitates  sharing  it 
with  colleagues.  Just  enter  any 
of  those  codes  into  the  Quick¬ 
Link  box,  which  is  at  the  top  of 
every  page  on  our  site. 
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AT  DEADLINE 


India  Plans  Registry 
Of  Outsourcing  Staff 

NeTit  month,  India’s  National  As¬ 
sociation  of  Software  and  Service 
Companies  will  begin  work  on  an 
online  national  registry  of  workers 
at  business  process  outsourcing 
firms.  The  proposed  registry, 
which  is  intended  for  use  in 
employee  background  checks, 
could  help  reduce  the  risk  of  crim¬ 
inal  activity,  according  to  some 
industry  insiders. 


Novell  Profits  Slump 
On  Revenue  Decline 

Novell  Inc.  reported  a  91%  drop  in 
third-quarter  profit  on  a  slight  de¬ 
cline  in  revenue  as  the  company 
continues  to  shift  its  focus  from 
NetWare  to  Linux. 


NOVELL  BY  THE  NUMBERS 

REVENUE 

PROFIT/LOSS 

Q3’05 

S290M 

S2.1M 

Q3’04 

S305M 

S23.4M 

Several  Charged 
In  Win  2k  Hack 

Several  people  in  Turkey  and  Mo¬ 
rocco  have  been  arrested  for  their 
suspected  involvement  in  the  re¬ 
cent  spate  of  computer  worms 
targeting  Microsoft  Corp.’s  Win¬ 
dows  2000  operating  system. 
Microsoft  worked  with  Turkish 
and  Moroccan  authorities  and 
the  FBI  in  the  effort  to  find  the 
alleged  culprits.  The  worms, 
known  as  Zotob,  Rbot  and  Myfob, 
enabled  hackers  to  take  control  of 
infected  PCs. 


Infer  Global  Buys 
PLM  Vendor 

ERP  software  maker  Infor  Global 
Solutions  has  acquired  Formation 
Systems  Inc.,  a  maker  of  product 
life-cycle  management  (PLM) 
tools,  for  an  undisclosed  sum. 
Three-year-o!d  Infor  has  steadily 
scooped  up  other  software  com¬ 
panies  to  create  its  ERP  software 
line.  Infor  will  sell  Formation’s 
Optiva  software  as  a  stand-alone 
product  until  the  PLM  tool  is  inte¬ 
grated  into  its  offerings. 


Microsoft  Puts  Price  on 
Virtual  Server  Upgrade 


Says  it  warrants  product  release;  users 
without  Software  Assurance  have  to  pay 


BY  CAROL  SLIWA 


M 


ICROSOFT  CORP. 
last  week  dis¬ 
closed  plans  to 
change  the  initial 
service  pack  of  bug  fixes  and 
enhancements  that  had  been 
planned  for  its  Virtual  Server 
2005  software  into  an  “R 2” 
product  upgrade  that  some 
users  may  have  to  buy. 

There  have  been  no  major 
feature  changes  since  Micro¬ 
soft  announced  a  beta  version 
of  what  was  supposed  to  be 
Service  Pack  1  for  Virtual 
Server  2005  in  April,  said  a 
company  spokesman.  But 
Microsoft  officials  decided 
that  the  update’s  performance 
and  availability  improvements, 
64-bit  compatibility  and  other 
planned  enhancements 
“passed  the  bar”  necessary  for 
a  full  product  release,  said 
Zane  Adam,  a  director  of  mar¬ 
keting  for  Windows  Server. 

Users  who  bought  a  Soft¬ 
ware  Assurance  maintenance 
package  for  the  virtualization 
software  as  part  of  a  volume 
licensing  deal  with  Microsoft 
will  be  able  to  get  the  R2  up¬ 
grade  for  no  extra  cost,  Adam 
noted.  But  those  who  didn’t 
purchase  the  maintenance 
plan  will  have  to  pay  for  R2. 

“It  would  probably  be  a  sig¬ 
nificant  issue  for  us  if  we  had 
deployed  [Virtual  Server]  in 
more  areas  and  we  didn’t  have 
Software  Assurance,”  said 
Michael  Brown,  a  support  ser¬ 
vices  manager  at  the  Denver 
Health  and  Hospitals  Authori¬ 
ty  Inc.  “This  is  certainly  differ¬ 
ent  from  Microsoft’s  tradition¬ 
al  model.” 

Microsoft  users  are  accus¬ 
tomed  to  getting  a  service 
pack  update  following  the  re¬ 
lease  of  an  enterprise  product, 
Brown  added.  He  said  Denver 
Health  will  test  the  R2  up¬ 
grade  when  the  final  version  is 
released  later  this  year. 


Like  Denver  Health,  four 
other  users  contacted  by  Com- 
puterworld  said  they  pur¬ 
chased  Software  Assurance 
packages  for  Virtual  Server, 
which  allows  multiple  copies 
of  an  operating  system  to  be 
run  on  a  single  computer. 

“Usually,  if  we’re  going  to 
use  something  long  term,  we 
buy  it  with  Software  Assur¬ 
ance,”  said  Stan  Johnson,  a 
desktop  and  LAN  services 
manager  for  the  Multnomah 
County  government  in  Port¬ 
land,  Ore.  “So  the  fact  that 
they’re  doing  a  new  product 
release  isn’t  a  significant  con¬ 
cern  to  me.” 

Beyond  a  Service  Pack 

Demond  Hatter,  a  technical 
analyst  at  Exelon  Corp.  in 
Chicago,  said  he  typically  con¬ 
siders  a  service  pack  to  be  ori¬ 
ented  toward  bug  fixes.  “If  this 
is  more  of  a  functionality  en¬ 
hancement,  I  can  see  it  not  be¬ 
ing  a  service  pack,”  he  said. 

Virtual  Server  users  who 


Virtual  Server 
Road  Map 

■  The  planned  SP1  update  for 
Virtual  Server  2005  has  been 
changed  to  an  R2  product  up¬ 
grade,  scheduled  for  release  in 
the  fourth  quarter. 

*  A  new  version  is  due  next 
year  with  support  for  the  rival 
hardware  virtualization  tech¬ 
nologies  being  developed  by 
Intel  and  AMD. 

■  A  hypervisor  layer  of  virtual¬ 
ization  code  will  be  built  into 
the  Longhorn  server  version  of 
Windows,  but  Microsoft  says  it 
won’t  be  in  the  first  release. 


lack  Software  Assurance’s  up¬ 
grade  protection  won’t  miss 
out  on  critical  bug  or  security 
fixes,  according  to  Adam. 
However,  they  won’t  get  the 
rollup  of  fixes  that  comes  with 
a  typical  security  pack  unless 
they  opt  to  buy  R2. 

Microsoft  “sweated”  over 
the  decision  to  make  R2  a 
product  release,  Adam  said. 
But,  he  added,  the  company 
was  in  a  somewhat  unique  sit¬ 
uation  with  Virtual  Server, 


mmmmm 


New  Intel  Chips  to  Run  Slow,  Save  Power 


SAN  FRANCISCO 

THE  NEW  architecture  that  will 
grace  Intel’s  processors  starting 
in  the  second  half  of  2006  bor¬ 
rows  many  of  the  design  phi¬ 
losophies  that  have  made  the 
company’s  Pentium  M  proces¬ 
sors  a  success,  Intel  executives 
said  last  week. 

Intel  President  and  CEO  Paul 
Otellini,  in  his  keynote  address  at 
the  Intel  Developer  Forum  here, 
confirmed  the  company’s  plans 
to  release  new  dual-core  chips 
for  desktops,  notebooks  and 
servers  based  on  a  common 
power-saving  architecture. 

The  architecture  carries  for¬ 
ward  some  of  the  technologies 
found  within  the  Pentium  4’s 
Netburst  architecture,  such  as 


64-bit  technology  and  virtualiza¬ 
tion  features,  said  Stephen 
Smith,  a  vice  president  in  Intel’s 
Digital  Enterprise  Group  and 
general  manager  of  its  desktop 
platforms  unit. 

However,  the  design  laid  out 
by  Intel  has  much  more  in  com¬ 
mon  with  the  Pentium  M  proces¬ 
sor  family  and  its  focus  on  sav¬ 
ing  power,  analysts  said. 

It  will  appear  in  the  second 
half  of  2006  with  the  introduc¬ 
tion  of  the  Merom  processor  for 
notebooks,  the  Conroe  CPU  for 
desktops  and  the  Woodcrest 
device  for  servers. 

Intel’s  new  architecture  dials 
down  the  power  and  the  clock 
speed  by  using  only  14  stages  to 
process  data,  meaning  the  chips 


since  it  has  been  on  the  mar¬ 
ket  only  since  last  October. 

Adam  said  Microsoft  stud¬ 
ied  the  Virtual  Server  cus¬ 
tomer  base  and  found  that  the 
majority  of  users  with  multi¬ 
ple  copies  of  the  software  have 
Software  Assurance  as  part  of 
volume  licensing  contracts. 

Microsoft  provided  an  up¬ 
date  on  its  virtualization  plans 
at  last  week’s  Intel  Developer 
Forum  in  San  Francisco.  The 
software  vendor’s  long-term 
virtualization  road  map  calls 
for  a  thin  hypervisor  layer  of 
code  supporting  virtualization 
capabilities  to  be  built  into  the 
next  major  release  of  Win¬ 
dows  Server,  code-named 
Longhorn.  But  Microsoft  has 
said  that  the  hypervisor  tech¬ 
nology  won’t  make  it  into  the 
initial  Longhorn  server  release 
due  sometime  in  2007. 

In  the  interim,  Microsoft  in¬ 
tends  to  develop  a  second  full 
version  of  Virtual  Server  that 
will  follow  the  R2  release.  Last 
week,  it  outlined  plans  to  ship 
a  beta  copy  of  that  version  in 
the  first  half  of  2006  and  the 
finished  software  in  the  sec¬ 
ond  half  of  the  year. 

The  promised  new  features 
include  support  for  Intel 
Corp.’s  performance-boosting 
virtualization  technology,  VT, 
as  well  as  Advanced  Micro 
Devices  Inc.’s  rival  Pacifica 
approach.  ©  56460 


will  do  more  work  per  stage  and 
can  therefore  run  at  slower  clock 
speeds,  Smith  said. 

Merom  and  the  other  new 
chips  will  also  be  able  to  process 
four  instructions  per  clock  cycle, 
Smith  said. 

Nathan  Brookwood,  an  analyst 
at  Insight  64  in  Saratoga,  Calif., 
called  that  feature  a  significant 
improvement  that  will  allow  the 
processors  to  do  even  more  work 
per  cycle  than  the  Pentium  M. 

Another  notable  improvement 
in  the  new  design  is  the  ability  of 
its  memory  caches  to  share 
data.  That  feature,  which  was 
first  designed  into  the  Yonah 
dual-core  mobile  processor  due 
out  in  the  first  quarter  of  next 
year,  will  be  extended  to  all  chips 
starting  next  year. 

-  Tom  Krazit,  IDG  News  Service 
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Cisco  Expects  IOS  Upgrade  to  Ease 
Management  of  Catalyst  Switches 

New  modularity  features  aim  to  speed 
software  upgrades  and  switch  restarts 


BY  MATT  HAMBLEN 

Cisco  Systems  Inc.  today  plans 
to  announce  an  upgrade  of 
the  Internetworking  Operat¬ 
ing  System  software  for  its 
flagship  Catalyst  6500  Series 
switches,  supporting  increased 
modularity  that’s  designed  to 
improve  operational  efficien¬ 
cy  for  IT  managers. 

The  new  features,  which  are 
scheduled  to  become  available 
on  some  Catalyst  6500  models 
late  this  year,  should  enable 
faster  restarts  of  the  switches 
and  reduce  the  time  it  takes 
users  to  install  software 
upgrades,  said  John  Yen, 
senior  manager  of  switching 


product  marketing  at  Cisco. 

The  updated  switch  offering 
is  based  on  technology  built 
into  the  CRS-1  carrier-class 
routing  system  that  Cisco 
introduced  in  May  2004. 
Overall,  the  technology  has 
been  in  the  works 
for  the  past  three 
years.  Asked  why 
the  technology 
wasn’t  available 
sooner,  Yen  said,  “It 
takes  this  long  for 
something  like  this.” 

American  Century 
Investments  in  Kan¬ 
sas  City,  Mo.,  has 
tested  the  enhanced 


IOS  on  60  Catalyst  6500s  dur¬ 
ing  the  three-year  develop¬ 
ment  cycle,  said  Dave  Rogers, 
senior  IT  network  manager  at 
the  financial  services  firm.  He 
estimated  that  the  increased 
modularity  will  reduce  the 
time  American  Century  spends 
upgrading  the  software  on  all 
60  switches  from  six  week¬ 
ends  to  about  six  hours. 

“This  capability 
actually  allows  us  to 
do  software  up¬ 
grades  immediately 
without  production 
downtime  or  waiting 
until  a  scheduled 
maintenance  win¬ 
dow,”  Rogers  said  in 
an  e-mail  interview. 

American  Century 
plans  to  install  the 


upgrade  next  year,  Rogers 
said.  He  noted  that  the  soft¬ 
ware  will  also  allow  automatic 
recovery  of  a  single  network¬ 
ing  process  within  a  switch 
without  interrupting  the  flow 
of  data  for  other  processes. 

For  example,  if  a  routing 
table  gets  corrupted  and  needs 
to  be  cleaned  up  and  restarted, 
the  new  capabilities  in  IOS 
will  enable  that  work  to  be 
done  without  affecting  func¬ 
tions  such  as  the  management 
of  port  configuration  data, 
said  Zeus  Kerravala,  an  analyst 
at  Yankee  Group  Research  Inc. 
in  Boston. 

Previously,  IT  shops  have 
had  to  resort  to  shutting  down 
entire  switches  to  perform 
maintenance  tasks,  often  on 
weekends,  Kerravala  said. 

He  added  that  Juniper  Net¬ 
works  Inc.  offers  similar  func¬ 
tionality  on  routers  but  not 
switches,  while  Extreme  Net¬ 
works  Inc.  supports  some  of 
the  capabilities  on  its  switch¬ 


es.  But  the  Catalyst  6500  in¬ 
stalled  base  is  enormous,  and 
users  have  been  asking  for  the 
functionality  for  a  long  time, 
Kerravala  and  others  said. 

“The  IOS  update  is  a  pretty 
big  one,”  said  Mark  Fabbi,  an 
analyst  at  Gartner  Inc.  “It  will 
certainly  make  the  life  of  net¬ 
work  operators  easier.  I’ve  al¬ 
ways  considered  one  of  Cis¬ 
co’s  Achilles’  heels  to  be  oper¬ 
ations,  and  this  clearly  helps 
make  things  better.” 

Yen  said  the  update  will  be 
added  to  Cisco’s  IOS  12.2SX 
release  in  the  fourth  quarter 
for  users  of  the  Catalyst  6500 
Supervisor  Engine  720,  which 
is  aimed  at  data  center  appli¬ 
cations.  The  new  features  are 
due  to  become  available  in  the 
first  quarter  of  2006  for  cus¬ 
tomers  using  the  lower-end 
Supervisor  Engine  32. 

The  update  also  includes 
new  software  that  can  help  IT 
managers  automate  routine 
tasks,  Yen  said.  ©  56443 


ROGERS:  The  new 

IOS  will  let  Ameri¬ 
can  Century  reduce 
upgrade  times. 


Ontario  Gov’t  to  Take  Control 
Of  Controversial  IT  System 


BY  MARC  L.  SONGINI 

The  government  of  Ontario 
next  month  will  take  control 
of  a  controversial  3-year-old 
welfare  payment  system  that 
critics  say  is  still  underper¬ 
forming  and  failing  to  deliver 
a  return  on  investment. 

The  Social  Delivery  Model 
Technology  (SDMT)  system 
was  custom-written  by  Accen¬ 
ture  Ltd.  to  modernize  and  im¬ 
prove  business  processes  at 
the  Ontario  Ministry  of  Com¬ 
munity  and  Social  Services 
(CSS).  Accenture  has  run  the 
system  for  the  ministry  since 
its  installation  in  2002. 

The  five-year  development 
project  started  in  1997.  Accen¬ 
ture  was  to  be  paid  no  more 
than  $151  million  but  eventual¬ 
ly  billed  $206  million.  The 
overall  price  tag  ballooned  to 
an  estimated  $335  million. 

Since  the  SDMT  system 
went  live  in  2002,  end  users 
have  complained  about  down¬ 
time  and  difficulties  with 
usability  and  stability,  which 
has  provoked  political  contro¬ 


versy  [QuickLink  48520]. 

One  chapter  of  the  saga  will 
end  on  Sept.  30,  when  Accen¬ 
ture’s  contract  to  run  the  sys¬ 
tem  expires.  In  a  statement, 
the  CSS  claimed  that  knowl¬ 
edge  transfer  with  Accenture 
has  been  completed  and  that 
the  ministry  is  “fully  prepared” 
to  assume  maintenance  and 
support  responsibilities. 

Lingering  Dissatisfaction 

But  criticism  of  the  system 
continues  from  some  corners. 

“No  one  can  say  that  the 
public  got  value  for  its  mon¬ 
ey,”  said  Ontario  legislator 
Shelley  Martel,  a  member  of 
the  provincial  parliament  from 
the  Nickel  Belt  region.  “The 
computer  system  doesn’t  work 
the  way  it  was  supposed  to  af¬ 
ter  all  this  time.  People  have  to 
go  in  and  manually  make 
changes  when  they  should  be 
done  directly  online.  I  don’t 
know  what  the  government 
can  do  to  fix  the  computer 
problems  at  this  point.” 

Some  regional  welfare  ad¬ 


Study  Finds  Many  IT  Failures  in  Ontario 


ministrators  last  week  agreed 
that  there  are  outstanding  is¬ 
sues  with  the  system  —  pri¬ 
marily  the  fact  that  it’s  still 
difficult  to  use. 

For  example,  Janet  Menard, 
a  director  of  Ontario  Works  in 
the  Region  of  Peel,  said  the 
system  is  rules-driven  and 
complex.  Adjustments  related 
to  policy  changes  can  be  made 
only  during  regular  upgrades, 
she  said,  which  can  cause 
problems  for  her  operation. 

Without  offering  details, 
a  C8S  spokesman  said  via 
e-mail  that  many  improve¬ 
ments  have  been  made  to  the 
underlying  technology.  For 
example,  the  system  has  been 
tweaked  so  that  the  ministry 
can  reduce  the  number  of  con¬ 
sultants  needed  to  run  it. 

In  addition,  the  spokesman 
said  that  response  times  have 
improved,  system  availability 
has  been  running  at  99%  over 
the  past  year,  and  rigorous 
testing  is  regularly  undertaken 
prior  to  enhancement  rollouts. 

For  its  part,  Accenture 
stands  by  the  results  of  the 
project.  “Accenture’s  work  for 
Ontario  has  helped  create  a 
welfare  delivery  system  that 
operates  more  efficiently  than 


SOME  40%  of  all  IT  projects 
undertaken  by  the  provincial 
government  of  Ontario  fail  to 
meet  goals  in  some  way,  ac¬ 
cording  to  a  report  issued  last 
month  by  a  task  force  of  govern¬ 
ment  and  academic  officials. 

The  province’s  IT  projects  are 
missing  targets  in  a  variety  of 
ways,  including  cost  overruns, 
the  inability  to  achieve  expected 
benefits,  and  the  loss  of  support 
and  momentum,  the  study 
found.  In  many  cases,  the  “re¬ 
sults  [are]  well  short  of  hoped- 
for  outcomes,”  the  report  said. 

The  report  has  already 
prompted  the  government  to 
adopt  a  portfolio  management 
approach  on  all  major  IT  proj¬ 
ects,  said  Government  Services 
Minister  Gerry  Phillips  in  a  state¬ 
ment.  In  addition,  plans  are  un¬ 
der  way  to  create  a  scorecard- 

at  any  time  in  its  history,”  stat¬ 
ed  Accenture  partner  Alden 
Cuddihey,  in  an  e-mail. 

He  claimed  that  the  Ontario 
government  has  paid  the  addi¬ 
tional  $55  million  billed  by  Ac¬ 
centure  out  of  savings,  not 
with  tax  dollars. 


based  system  to  assess  risks 
and  ensure  that  projects  are  in 
line  with  priorities. 

The  task  force  was  commis¬ 
sioned  in  September  2004  by 
the  province’s  Ministry  of  Gov¬ 
ernment  Services. 

The  report,  titled  “On  the 
Management  of  Large-Scale  In¬ 
formation  &  Information  Tech¬ 
nology  Projects,"  was  commis¬ 
sioned  in  part  because  of  the 
perceived  shortcomings  of  the 
Social  Delivery  Model  Technolo¬ 
gy  welfare  system  created  by 
Accenture,  according  to  an 
agency  spokesman. 

Among  the  recommenda¬ 
tions  of  the  task  force  was  that 
the  Ontario  government  “signifi 
cantly  increase  the  strength  of 
its  governance  of  major  opera¬ 
tional  transformations." 

-  Marc  L  Songini 

Despite  the  system’s  trou¬ 
bles,  Menard  also  believes  that 
it  is  an  improvement  over  its 
predecessor.  The  SDMT  has 
“taken  us  well  beyond  other 
welfare  jurisdictions  in  terms 
of  technology,”  she  said.  “It’s  a 
good  foundation.”  ©  56482 
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BEA  to  Buy  Portal 
Vendor  Plumtree 

BEA  Systems  Inc.  has  agreed  to 
buy  portal  software  maker  Plum- 
tree  Software  Inc.  for  around 
S200  million  in  cash.  Analysts 
had  expected  a  larger  company 
to  buy  the  struggling  Plumtree, 
which  will  add  a  new  line  of  col¬ 
laboration  software  to  BEA's  port¬ 
folio.  The  deal  is  expected  to  close 
in  the  next  few  months.  BEA  said 
the  Plumtree  portal  will  be  aimed 
at  a  different  audience  than  its 
own  WebLogic  Portal  software. 


Microsoft,  Artemis 
Settle  Lawsuit 

Microsoft  Corp.  has  reached  a 
confidential  settlement  in  a  trade¬ 
mark  infringement  case  brought 
against  it  by  biometrics  company 
Artemis  Solutions  Group  Inc.  Un¬ 
der  the  settlement,  Artemis  retains 
rights  to  its  BioCert  trademark  and 
dismisses  its  suit  against  Micro¬ 
soft.  In  May,  Microsoft  began 
licensing  a  patented  technology 
called  BioCert  to  third  parties. 


WiMax  Testing 
Due  to  Begin  Soon 

The  WiMax  Forum  is  expected  to 
finish  validating  a  system  for  cer¬ 
tification  testing  this  week.  Some 
vendors  already  have  products  at 
the  Cetecom  SA  lab  in  Malaga, 
Spain,  the  testing  site.  The  forum 
is  currently  validating  test  scripts 
and  equipment.  The  WiMax  Forum 
expects  formal  testing  to  begin  in 
October,  with  the  first  products 
certified  by  the  end  of  the  year. 


E-commerce  Sales 
Up  26%  in  Q2 

Online  retail  sales  in  the  second 
quarter  reached  $21.1  billion,  up 
26%  from  $16.8  billion  a  year 
earlier,  according  to  the  U.S.  Cen¬ 
sus  Bureau.  Total  retail  sales  for 
the  quarter  were  $940.8  billion, 
up  8.4%.  Online  travel  services, 
financial  brokers  and  dealers,  and 
ticket  agencies  aren’t  included  in 
the  survey. 
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HOT  TECHNOLOGY  TRENDS,  NEW  PRODUCT 
NEWS  AND  INDUSTRY  BUZZ  BY  MARK  HALL 
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Death  to :)  and :-( and 
;->  and  the  Like!  Let . .. 

. . .  natural  communications  recommence.  A  world  with¬ 
out  emoticons  would  be  a  far  better  place.  It  could 
happen  if  more  companies  embrace  unified  messag¬ 
ing  technologies,  suggests  Andrew  Feit,  senior  vice 
president  of  marketing  at  Adomo  Inc.  in  Cupertino, 


Calif.  “Business  messaging 
swung  over  to  text  because 
there  was  a  record  of  it  with 
e-mail,”  Feit  argues.  Tradi¬ 
tional  voice  mail  systems 
hobble  users  by  not  letting 
them  easily  view  and  priori¬ 
tize  messages,  he  says.  But 
with  unified  messaging, 
v-mail  becomes  aural  e-mail, 
letting  you  see  who  has  con¬ 
tacted  you  and  then  deter¬ 
mine  which  message  to  listen 
to  first.  You  can  also  store 
voice  mail  or  pass  it  along 
to  anyone  with  an  e-mail 
account.  Feit  says  those  capa¬ 
bilities  will  “swing  the  pendu¬ 
lum  back  toward  voice  com¬ 
munication  because  it’s  more 
efficient  than  text.”  Plus,  he 
adds,  “it’s  easier  to  express  a 
feeling  to  the  recipient.”  So, 


you’ll  no  longer  have  to  pon¬ 
der  which  emoticon  best  rep¬ 
resents  the  sarcasm  you  want 
to  express  about,  say,  vendor 
product-delivery  promises. 
No  need  to  feel  cynical  about 
the  delivery  of  Adorno’s 
Voice  Messaging  for  Ex¬ 
change  appliance.  It’s  being 
announced  today  but  has 
been  shipping  for  two  weeks. 
Feit  says  the  device  connects 
your  Microsoft  Exchange 
servers  to  your  private 
branch  exchange.  V-mails  are 
routed  to  your  Outlook  fold¬ 
er,  and  if  callers  are  listed  in 
your  address  book,  their  in¬ 
formation  is  displayed.  Ac¬ 
cording  to  Feit,  capabilities 
due  by  year’s  end  include  a 
speech-based  autoattendant 
that  can  find  names  in  a  com¬ 
pany  directory  through  voice 
or  keypad  prompts.  Another 
upcoming  feature  will  let  out¬ 
side  callers  schedule  meet¬ 
ings  with  Adomo  users  by 
checking  their  Outlook  calen¬ 
dars  via  voice.  Pricing  for  the 
appliance  starts  at  $12,000. 


Proprietary  mobile 
e-mail  protocols  are . . . 

. . .  likely  to  fall  victim  to  the 
open-source  movement.  So 

claims  Fabrizio  Capobianco, 
CEO  of  Funambol  Inc.  in 
Redwood  City,  Calif.  That 
spells  trouble  for  the  existing 
protocols  from  Research  In 
Motion  Ltd.  and  Microsoft 
Corp.,  he  predicts.  “Mobile 
e-mail  will  clearly  be  a  com¬ 
modity,”  Capobianco  says. 
“And  in  such  a  market,  open- 
source  wins.”  FunamboFs 
Sync4j  soft¬ 
ware  is  an 
open-source 
application 
server  for 
mobile  de¬ 
vices  that  in¬ 
cludes  e-mail, 
calendaring 
and  contact 
management 
apps  plus 
data  synchronization  tools  for 
BlackBerry,  Palm,  Symbian 
and  Windows  Mobile  de¬ 
vices,  as  well  as  Java-based 
phones  and  even  iPods.  (Al¬ 
though  iPods  don’t  yet  have 
mobile  phone  capabilities, 
they  do  have  contact  lists  that 
can  be  updated  with  Sync4j.) 
Capobianco  says  a  3.0  release 
due  late  this  year  will  deliver 
e-mail  and  other  apps  to  any 
cell  phone  that  supports  the 
Sync  ML  standard,  which  is 
being  driven  by  the  Open 
Mobile  Alliance,  a  consor¬ 
tium  of  more  than  200  com¬ 
panies.  Sync4j  3.0  will  also 
add  support  for  apps  based 
on  Microsoft’s  .Net  Compact 
Framework  technology. 

Ex-cop  now  deters 
cybercrime  with . . . 

. . .  tools  designed  to  protect 
sensitive  corporate  data.  Jim 

Pante  once  collared  fraud  and 
vice  criminals  in  New  Jersey, 
but  he  has  shifted  his  talents 
to  nabbing  thieves  trying  to 
sneak  data  out  of  your  enter¬ 
prise.  Pante  is  the  CEO  of  San 
Mateo,  Calif.-based  Tablus 
Inc.,  which  sells  Content 


Alarm,  an  appliance  with 
software  that  crawls  your  net¬ 
work  looking  for  data  types  to 
protect  [QuickLink  54822]. 
Content  Alarm  then  enforces 
your  data-protection  policies. 
This  fall,  Tablus  will  add  its 
controls  to 
mobile  devices 
that  connect  to 
corporate  net¬ 
works.  Pante 
says  that  you 
need  to  con¬ 
trol  content 
not  just  for 
intellectual 
property  and  identity-theft 
reasons,  but  also  because 
it’s  increasingly  a  crime 
not  to  do  so.  He  also  notes 
that  global  security  teams 
need  to  account  for  all  the 
unique  laws  in  different 
nations.  Content  Alarm  in¬ 
cludes  policies  for  complying 
with  U.S.  and  European 
Union  regulations.  Pricing 
starts  at  $25,000. 


1in23 

Number  of  U.S. 
citizens  who 
are  victims  of 
identity  theft, 
says  Utah’s 
attorney  general 


Detect  whether  remote 
computers  comply . . . 

. . .  with  corporate  security  poli¬ 
cies,  even  if  they  aren’t  connect¬ 
ed  to  your  network.  That  trick 
is  one  of  the  new  features  be¬ 
ing  added  this  week  by  LAN- 
Desk  Software  Inc.  in  South 
Jordan,  Utah,  as  part  of  a 
Security  Suite 
8.6  upgrade. 

According  to 
Kevin  Auger, 

LANDesk’s 
product  line 
manager,  a 
Management 
Gateway  mod¬ 
ule  adds  a  bit 
of  client  code  to  laptops  that 
senses  when  the  machines 
are  on  the  Internet  and  then 
connects  them  to  your  Secu¬ 
rity  Suite  server.  The  soft¬ 
ware  checks  to  see  whether 
your  devices  are  up  to  date 
with  antivirus  software, 
patches  or  anything  else  you 
set  in  your  security  policies. 
Pricing  for  Security  Suite  8.6 
starts  at  $59.  0  56421 


Number  of 
days  after  beta 
release  of 
Microsoft  Vista 
before  first  virus 
appeared. 
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COMPLETE  BI. 

RIGHT  IN  YOUR  CITY. 


Attend  the  Cognos  8  Business  Intelligence  Launch  Event 
on  September  14,  2005,  and  you’ll: 

•  Hear  the  Cognos  8  BI  vision  from  Cognos  President  and  CEO  Rob  Ashe. 

•  Explore  Cognos  8  BI  capabilities  with  a  live  demo. 

•  Hear  from  beta  customers  about  their  early  experiences  with  the  solution. 

•  And  gain  key  insights  from  Gartner  VP  and  Research  Fellow  Howard  Dresner, 
our  featured  speaker. 


Register  today.  Visit  www.cognos.com/na/cognos8-launchl0 


ERSE  FOR  LOCAL  EVENT  INFORMATION. 
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SEPTEMBER  14,2005 

CHICAGO 

10:00  A.M. 


Watch  the  new  era  of  BI  unfold 
with  your  colleagues  and  the 
experts  from  Cognos. 


Donald  E.  Stephens  Convention  Center 
5555  N.  River  Road 
Rosemont,  IL  60018 

10:00  a.m.:  Registration  and  refreshments 
11:00  a.m.:  Satellite  feed  of  the  worldwide 
Cognos  BI  Launch 

12:30  p.m.:  Local  program  including  Solutions 
Showcase  and  lunch 

Live  speakers  featured  in  Chicago 
Eric  Rogge,  VP  and  Research  Director;  Ventana  Research 
Manpower  Inc.  (beta  customer) 


Seating  is  limited,  so  reserve  your  space  today. 


THE  NEXT  LEVEL  OF  PERFORMANCE1' 


TO  REGISTER  FOR  THE  CHICAGO  EVENT, 

VISIT  www.cognos.com/na/cognos8-launchl0  TODAY. 
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0  LIMITATIONS.  NO  IMITA 


Business  Intelligence  made  a  promise:  to  make  it  simple  for  everyone  to  use  information  to  make 
better  decisions.  But,  given  your  complex  IT  infrastructure,  the  reality  of  getting  a  single  BI  standard 
in  place  across  the  company  has  been  anything  but  simple.  Until  now. 

Introducing  Cognos  8  Business  Intelligence,  the  one  solution  built  to  break  down  the  barriers  limiting 
BI’s  potential.  With  a  complete  Web  Services-based  SOA.  A  simple  browser-based  interface.  A  full  range 
of  BI  capabilities  —  reporting,  analysis,  scorecarding,  dashboarding  and  more  —  all  in  a  single  product 
and  on  a  single  architecture.  And  the  BI  foundation  for  companies  demanding  a  simpler  path  to  a  complete 
performance  management  system. 

It’s  everything  BI  promised  to  be.  And  now,  it  s  here. 

To  learn  more  and  to  find  out  where  you  can  preview  Cognos  8,  go  to  cognos.com/simple 

COGNOS  8  BUSINESS  INTELLIGENCE. 
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THE  NEXT  LEVEL  OF  PERFORMANCE  " 


logo,  Windows  Server,  and  Windows  Server  System  are  either  registered  trademarks  or  trademarks  of 
;  of,  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 


Microsoft 


sTget  the  facts. 

RADIOSHACK  COMPARED  TCO  AND  FOUND  WINDOWS  SERVER  SYSTEM 
WILL  SAVE  THEM  MILLIONS. 

"In  upgrading  our  aging  UNIX-based  servers,  we  considered  both  Windows  Server™  and 
Linux.  Windows  Server  System™  offered  several  advantages,  including  the  ability  to  consolidate 
our  in-store  servers  by  50%  from  10,200  to  5,100 — and  a  savings  of  several  million  dollars 
in  hardware,  software,  systems  management,  and  support  costs."  /jr\  _  .. 

-Ron  Cook,  Vice  President  and  Chief  Technology  Officer,  RadioShack  a  io  ac 

For  these  and  other  third-party  findings,  go  to  microsoft.com/getthefacts 


Windows 
Server  System 
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New  York  Signs  Pact  to 
Boost  Transit  Security 

$212  million  project  includes  rollout  of 
software,  cameras  and  sensors  citywide 


BRIEFS 


Sun  Releases  DRM 
As  Open-Source 

Sun  Microsystems  Inc.  will  re¬ 
lease  its  digital  rights  manage¬ 
ment  project  under  an  open- 
source  license,  in  hopes  of  driv¬ 
ing  a  unified  standard  to  protect 
digital  media  such  as  music  and 
movies.  The  Dream  Project  will 
be  released  in  the  coming  weeks 
under  the  open-source  Common 
Development  and  Distribution  Li¬ 
cense.  No  other  companies  have 
yet  joined  in  the  effort. 


Fiorina  to  Write 
Career  Memoir 

Carly  Fiorina  has  signed  a  deal 
to  pen  a  memoir  about  her  career, 
which  went  on  hiatus  last  Febru¬ 
ary  following  her  ouster  from 
Hewlett-Packard  Co.  after  a  tur¬ 
bulent  five-year  run  as  CEO.  Due 
out  in  late  2006  from  Penguin 
Group  (USA)  Inc.’s  Portfolio  unit, 
the  book  will  include  career  high¬ 
lights  and  her  views  on  topics 
such  as  leadership,  technology 
and  women  in  business. 


Novell  to  Buy  Out 
Indian  Partner 

Novell  Inc.  is  acquiring  its  part¬ 
ner’s  stake  in  Onward  Novell 
Software  (India)  Pvt.,  a  Mumbai, 
India-based  sales  and  distribution 
joint  venture.  Novell  has  operated 
in  India  since  1992  as  Onward 
Novell  Software  with  Indian  part¬ 
ner  Onward  Network  Technologies 
Ltd.  Novell’s  development  center 
in  Bangalore,  India,  is  already  a 
subsidiary. 


U,&.  Firm  First  to 
Use  Sun  Grid  Utility 

A  U.K.  financial  services  software 
vendor  has  released  an  applica¬ 
tion  that  uses  the  pay-per-use 
Sun  Grid  compute  utility,  making 
it  the  first  Sisn  Microsystems 
partner  to  use  the  technology. 
CD02  Ltd.  has  finished  a  trial  de¬ 
ployment  on  Sun  Grid  and  is  ready 
to  sel?  the  hosted  application  us¬ 
ing  the  pay-per-use  feature. 


BY  JAIKUMAR  VIJAYAN 

ew  YORK’S  Metro¬ 
politan  Transporta¬ 
tion  Authority 
(MTA)  last  week 
said  it  has  chosen  Lockheed 
Martin  Corp.  to  be  the  prime 
contractor  on  a  $212  million 
project  to  bolster  security 
across  all  of  its  facilities. 

Under  a  three-year  contract, 
Lockheed  Martin  will  develop 
and  deploy  an  infrastructure- 
protection  system  that  will  use 


AT&T  deal  was 
canceled  in  May 
amid  protests 

BY  LINDA  ROSENCRANCE 

The  U.S.  Department  of  the 
Treasury  is  reopening  bidding 
for  a  $1  billion  communica¬ 
tions  contract  that  was  origi¬ 
nally  awarded  to  AT&T  Corp. 
late  last  year.  That  deal  was 
canceled  in  May  after  com¬ 
petitors  protested  that  the  bid¬ 
ding  process  was  unfair. 

The  agency  made  the  latest 
move  after  an  unsuccessful  ef- 


thousands  of  cameras,  as  well 
as  intelligent  video  and  sensor 
technologies,  to  monitor  New 
York’s  subway  system,  com¬ 
muter-rail  platforms,  and 
highway  bridges  and  tunnels. 

The  integrated  command, 
communications  and  control 
capabilities  that  the  project 
will  deliver  should  “harden” 
the  transit  system  against  fu¬ 
ture  terror  attacks,  Bill  Mor- 
ange,  the  MTA’s  security  di¬ 
rector,  said  in  a  statement. 


fort  to  find  a  contractor 
through  the  General  Services 
Administration  (GSA). 

The  three-year  Treasury 
Communications  Enterprise 
contract,  which  includes  sev¬ 
en  one-year  options,  seeks  a 
vendor  to  supply  telecommu¬ 
nications  services  and  support 
for  more  than  1,000  domestic 
locations  and  tens  of  thou¬ 
sands  of  users  in  the  U.S.  and 
overseas. 

The  contract,  initially  won 
by  AT&T  in  December,  was 
canceled  after  protests  were 
reviewed  and  upheld  by  the 


The  authority’s  effort  to  bol¬ 
ster  security  comes  just  weeks 
after  July’s  terrorist  bombings 
in  London.  The  attacks  there 
raised  concerns  about  the  vul¬ 
nerability  of  commuter-rail 
and  mass-transit  systems  in 
the  U.S.  and  the  IT  challenges 
involved  in  protecting  them 
[QuickLink  55438]. 

Charles  Patterson,  a  mem¬ 
ber  of  the  transportation 
security  council  at  ASIS  In¬ 
ternational,  an  Alexandria, 
Va.-based  trade  association 
for  security  professionals, 
called  the  New  York  plan  one 
of  the  most  advanced  transit- 
security  initiatives  under¬ 
taken  in  the  U.S. 

“I  think  it’s  a  very  good  and 
a  very  significant  step  in  the 
right  direction,”  he  said. 

“As  far  as  I  know,  it’s  the 
only  large-scale  systems  inte¬ 
gration  initiative  [of  its  sort] 
in  the  country,”  Greg  Hull, 
director  of  operational  safety 
and  security  at  the  American 
Public  Transportation  Associ¬ 
ation  in  Washington,  said  via 
e-mail. 

Rochester,  N.Y.-based  Lenel 
Systems  International  Inc.  will 
provide  the  software  support¬ 
ing  core  applications  such  as 


Government  Accountability 
Office  [QuickLink  54669]. 
Objections  came  from  Broad¬ 
wing  Communications  LLC, 
Level  3  Communications  Inc., 
MCI  Inc.,  Northrup  Grumman 
Information  Technology  and 
Qwest  Government  Services 
Inc.  A  sixth  bidder,  Sprint 
International  Communica¬ 
tions  Corp.,  didn’t  contest 
the  contract. 

In  its  decision,  the  GAO  said 
the  Treasury  Department  had 
not  had  discussions  with  all 
of  the  bidders  and  ordered  the 
department  to  do  so  before  re¬ 
awarding  the  contract. 

After  canceling  its  deal  with 
AT&T,  the  Treasury  Depart¬ 
ment  had  said  it  would  use  the 
existing  GSA  programs  and 


Treasury  Reopens  Bidding 
For  $1B  Telecom  Contract 


the  access  control,  alarm  mon¬ 
itoring  and  digital  video  sur¬ 
veillance  systems.  The  MTA 
will  also  use  technologies 
from  vendors  such  as  Arinc 
Inc.,  Skanska  USA  Civil  Inc. 
and  Intergraph  Corp. 

The  new  system  will  give 
the  MTA  “a  common  opera¬ 
tional  picture”  across  all  of  its 
facilities,  said  Mark  Bonatucci, 
program  manager  for  the  ini- 

H  As  far  as  I 
know,  it’s  the 
only  large-scale 
systems  integration 
initiative  [of  its  sort] 
in  the  country. 

GREG  HULL,  DIRECTOR  OF 
OPERATIONAL  SAFETY  AND  SECURITY, 
AMERICAN  PUBLIC  TRANSPORTATION 
ASSOCIATION 

tiative  at  Bethesda,  Md.-based 
Lockheed  Martin. 

Each  command  center  will 
be  equipped  with  a  bank  of 
video  screens  for  displaying 
feeds  from  cameras  and  sen¬ 
sors  and  showing  satellite  and 
image-based  displays  of  MTA 
facilities.  Alarms  and  alerts 
will  be  automatically  forward¬ 
ed  to  the  centers  for  analysis, 
and  Bonatucci  said  the  video 
screens  will  give  workers 
recommended  courses  of  ac¬ 
tion  for  handling  situations. 

©  56464 


contractors  for  the  work. 

However,  in  an  e-mail  state¬ 
ment  last  week,  a  Treasury 
Department  spokeswoman 
said  the  department  is  moving 
forward  with  its  own  procure¬ 
ment  effort  because  an  evalua¬ 
tion  found  that  no  existing 
GSA  contract  could  meet  its 
communications  needs. 

The  Treasury  Department 
also  said  it  will  implement  the 
GAO’s  recommendation  to 
renegotiate  with  the  other  bid¬ 
ders  and  will  give  the  vendors 
that  had  previously  submitted 
proposals  an  opportunity  to 
submit  revised  bids. 

Treasury  officials  didn’t 
give  a  timeline  for  the  process. 
The  GAO  couldn’t  be  reached 
for  comment.  ©  56457 


gSjsgSyE 


■- 

.  . ■  f-„  V'JOr':’r^' 

'  -(ri-'i  i.-v 

- ■■■- .  ..  *  ■  .>- 


We’re  inspired  by  the  human  side  of  data.  There’s  more  to  GPS  navigation  systems  than  just  road  data;  3 


It’s  the  freedom  to  find  exactly  what  you  want,  even  in  an  urban  jungle.  That’s  why  durable  Hitachi  harCj^fef^ 
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drives  are  perfect  for  the  automotive  industry,  and  hungry  drivers.  From  the  smallest  Microdrive  to  the 
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largest  SAN  solution,  Data  Storage  from  Hitachi.  .V 
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Oracle  Ships  Overdue 
10g  Collaboration  Suite 


But  year-late 
release  maintains 
price  advantage 

BY  STACY  COWLEY 

RACLE  CORP.  has 
shipped  the  newest 
version  of  its  Ora¬ 
cle  Collaboration 
Suite,  two  years  after  the  soft¬ 
ware’s  last  major  update  and 
more  than  a  year  after  its  in¬ 
tended  release  date. 

Oracle  launched  its  suite  in 
2002,  positioning  it  as  a  low- 
cost  alternative  in  a  market 
dominated  by  Microsoft 
Corp.’s  Exchange  and  IBM’s 
Notes/Domino.  The  new  lOg 
version  was  originally  slated 
to  ship  by  mid-2004. 


Although  the  Oracle  suite 
can  be  used  at  non-Oracle 
sites,  Gartner  Inc.  analysts  said 
in  a  report  that  they  expect  it 
will  appeal  mostly  to  Oracle 
customers  who  don’t  need 
complex  collaboration  or  mes¬ 
saging  functionality.  For  such 
users,  the  software’s  low  price 
tag  —  $60  per  named  user  for 
a  perpetual  license  —  could  be 
very  attractive,  the  report  said. 

The  IBM  and  Microsoft 
offerings  include  higher  back¬ 
end  and  per-user  costs. 

Pemco  Aviation  Group  Inc. 
installed  Oracle’s  collabora¬ 
tion  software  two  years  ago 
after  evaluating  rival  offerings 
from  IBM,  Microsoft  and  oth¬ 
er  vendors,  said  John  Griffith, 
director  of  IT  at  the  aerospace 


services  and  repair  company. 

Birmingham,  Ala. -based 
Pemco  had  been  using  Ex¬ 
change,  but  upgrading  to  the 
latest  version  would  have 
been  prohibitively  expensive. 
Oracle’s  software  offered  more 
functionality  at  a  lower  cost, 
said  Griffith.  He  has  been 
beta-testing  Oracle’s  lOg  re¬ 
lease  for  several  months  and 
expects  to  soon  begin  moving 
components  of  it  into  produc¬ 
tion  for  Pemco’s  650  users. 

Griffith  said  Pemco  will 
quickly  take  advantage  of  the 
new  Workspaces  collaboration 
portal,  which  builds  on  con¬ 
tent  management  functionali¬ 
ty  in  Oracle  Files  but  offers  a 
unified  user  interface. 

Still,  as  a  sign  of  how  deeply 


entrenched  the  market’s  lead¬ 
ers  are,  Pemco’s  employees 
still  use  Outlook  as  their  front- 
end  e-mail  client. 

“When  we  switched,  we  did 
very  little  training,”  Griffith 
said.  “The  users  don’t  know 
Oracle  is  on  the  back  end.” 

Moving  on  Messaging 

Like  the  rival  offerings,  Ora¬ 
cle’s  suite  offers  personal 
e-mail  and  calendar  applica¬ 
tions,  as  well  as  collaborative 
tools  such  as  group  file  man¬ 
agement  and  Web  conferenc¬ 
ing.  The  lOg  version  adds 
long-awaited  instant  messag¬ 
ing  functionality  and  the 
Workspaces  feature. 

Despite  offering  a  price  tag 
that  frequently  undercuts  Mi¬ 
crosoft’s  and  IBM’s,  Oracle  has 
gained  little  traction  in  the 
market,  thanks  in  part  to  the 
suite’s  more  limited  function¬ 
ality.  Market  research  firm 
IDC  estimates  the  2004  world¬ 
wide  market  for  “integrated 
collaborative  environments” 


at  $1.9  billion,  with  Microsoft 
and  IBM  together  drawing 
90%  of  that  spending.  Oracle 
registered  seventh  on  IDC’s 
list,  with  0.3%  of  the  market. 

“The  greatest  challenge  Or¬ 
acle  faces  is  getting  credibility 
in  the  messaging  world,”  said 
David  Ferris,  president  of 
messaging  and  collaboration 
research  firm  Ferris  Research 
Inc.  in  San  Francisco. 

Despite  the  delay,  users 
won’t  hold  it  against  Oracle, 
since  they’re  getting  the  inte¬ 
grated  technology  they  want¬ 
ed,  said  Mike  Gotta,  an  analyst 
at  Burton  Group,  a  consultan¬ 
cy  in  Midvale,  Utah. 

The  new  offering  should 
also  reassure  users  that  there 
is  senior-level  visibility  and 
commitment  from  Oracle 
about  collaboration,  Gotta 
said.  ©  56439 


Cowley  writes  for  the  IDG  News 
Service.  Computerworld’s 
Marc  L.  Songini  contributed 
to  this  story. 


Share  President  Still  Sees 
A  Future  for  User  Group 


BY  CHINA  MARTENS 

Share,  a  Chicago-based 
user  group  that’s  orient¬ 
ed  toward  IBM  main¬ 
frame  shops,  is  celebrat¬ 
ing  its  50th  anniversary 
this  year  [QuickLink 
52972].  The  indepen¬ 
dent  user  group 
currently  has  about 
20,000  members,  according  to 
President  Robert  Rosen.  Rosen, 
who  is  CIO  of  the  National 
Institute  of  Arthritis  and  Mus¬ 
culoskeletal  and  Skin  Diseases 
at  the  National  Institutes  of 
Health  in  Bethesda,  Md.,  spoke 
with  the  IDG  News  Service  be¬ 
fore  last  week’s  semiannual 
Share  conference  in  Boston. 

How  has  Share  changed  over  the 

years?  My  first  Share  meeting 
was  in  1970  Share  was  much 
more  related  to  the  scientific 
environment  then.  The  joke 
about  Share  used  to  be  there’d 
be  all  technical  people  talking 
bits  in  different  corners.  If  you 
asked,  “What’s  the  best  way  to 


organize  my  help 
desk?”  people  would 
look  at  you  as  if  you 
came  from  Mars.  But 
probably  from  the  mid- 
to  late-’70s  [onward], 
Share  was  also  cover¬ 
ing  business  issues. 

The  real  difference 
back  then  was  that 
when  we  talked  to  IBM,  it  was 
very  much  down  at  the  bit  and 
byte  level.  Now  it’s  very  much, 
“What’s  the  business  reason 
for  this  [product  or  feature]?” 

And  how  has  the  relationship 
between  Share  and  IBM  been  al¬ 
tered?  There  have  been  ups 
and  downs  in  the  relationship, 
adversarial  vs.  working  togeth¬ 
er.  It  depended  on  which  part 
of  IBM  you  were  dealing  with. 
We  always  had  pretty  good  re¬ 
lationships  with  the  develop¬ 
ers.  At  one  point  IBM  said, 
“Here’s  what  we’re  planning  to 
do  in  the  next  two  years,”  and 
we  had  input  into  that.  We  still 
have  that,  but  it’s  done  in  a  dif¬ 


ferent  way,  through  technical 
steering  committees,  where 
the  groups  meet  the  whole 
weekend  before  Share  with 
IBM,  and  the  meetings  don’t 
attract  as  much  publicity. 

One  big  difference  is  that 
IBM  has  more  ways  to  get  in¬ 
formation  [from  users].  Back 
when  I  first  started  [with 
Share],  when  IBM  came  to  a 
meeting,  80%  of  their  cus¬ 
tomers  would  be  there.  Now 
IBM  has  customer  councils, 


weblogs,  a  lot  more  sources  of 
information.  But  one  of  the 
problems  with  getting  infor¬ 
mation  is  that  you  need  to  val¬ 
idate  it.  How  good  is  it?  Who 
is  this  person,  a  crank  or  a 
CIO?  Share  offers  a  measure 
of  quality  of  input. 

What  about  attendance  at  Share 
meetings?  The  attendance  has 
been  up  and  down.  After  9/11, 
it  was  down  some,  but  we’ve 
seen  the  trend  reverse;  it’s  flat¬ 


tened  out,  and  [now]  there’s  a 
bit  of  an  increase.  Share’s  still 
doing  well;  we’ve  still  got 
money  in  the  bank.  We  still 
have  a  future.  ©  56442 


Martens  writes  for  the 
IDG  News  Service. 


MAINFRAME  MAVENS 

IBM  and  Share  want  to  help  young  IT 
workers  find  mainframe  jobs: 

QuickLink  56383 
www.computerworld.com 


Sarbanes-Oxley  Seen  as  Biggest  IT  Time  Waster  in  Poll 


Share  members  who  responded 
to  an  online  poll  this  month  said 
they  expect  complying  with  the 
mandates  of  the  Sarbanes-Oxley 
Act  to  be  the  least  effective  or 
most  wasteful  use  of  their  IT 
resources  in  coming  years, 
followed  by  the  deployment 
of  unproven  technologies. 

The  results  of  the  poll,  which 
was  conducted  from  Aug.  4  to  15 
among  people  who  had  prereg¬ 
istered  for  Share’s  Boston  con¬ 
ference,  were  released  last  week 
as  part  of  the  event. 

Twenty-eight  percent  of  the 


444  respondents  cited  Sar¬ 
banes-Oxley  compliance  as  a 
time  waster,  while  23°/o  chose 
the  installation  of  unproven 
products.  Another  19%  opted 
for  purchases  of  unneeded  tech¬ 
nologies,  and  17%  picked  con¬ 
tinued  support  of  outdated  hard¬ 
ware  and  software. 

Share  President  Robert 
Rosen  said  he  wasn't  surprised 
that  Sarbanes-Oxley  is  proving 
to  be  a  major  headache  for  IT 
managers  and  staffers.  “It’s  oc¬ 
cupying  a  lot  of  people’s  time, 
and  they  can’t  figure  out  what 


the  return  on  investment  is 
there,”  he  said. 

Heightened  information  secu¬ 
rity  is  the  emerging  trend  most 
likely  to  affect  business  comput¬ 
ing  over  the  next  five  years,  ac¬ 
cording  to  31%  of  those  who  an¬ 
swered  the  Share  poll.  Two  other 
significant  trends  identified  in 
the  poll  are  the  shortage  of  quali¬ 
fied  enterprise-class  IT  profes¬ 
sionals,  and  outsourcing  or  off¬ 
shoring  of  application  develop¬ 
ment  and  maintenance. 

-  China  Martens, 
IDG  News  Service 


An  International 
IT  News  Digest 


Fujitsu  Sues  Nanva  Over 
Memory  Chip  Patent 

TOKYO 

Fujitsu  ltd.  last  week  filed  a 
patent  infringement  lawsuit 
against  Taiwanese  memory  chip 
maker  Nanya  Technology  Corp.,  seek¬ 
ing  to  prohibit  the  future  importation 
and  sale  of  synchronous  dynamic  RAM 
devices  made  by  Nanya. 

The  lawsuit  was  filed  in  Tokyo  Dis¬ 
trict  Court  against  Nanya’s  local  sub¬ 
sidiary,  Nanya  Technology  Corpora¬ 
tion  Japan.  Tokyo-based  Fujitsu  is  also 
asking  the  court  to  award  it  undis¬ 
closed  monetary  damages. 

The  suit  involves  a  patent  related  to 
a  technology  for  improving  the  speed 
of  double  data  rate  SDRAM  chips,  a 
Fujitsu  spokesman  said. 

He  added  that  Fujitsu 
took  legal  action  after 
talks  between  the  two 
companies  failed  to  pro¬ 
duce  an  agreement  on 
patent  licensing. 

Nanya  declined  to  com¬ 
ment  on  the  lawsuit. 

“We  haven’t  received 
any  information  from  Fu¬ 
jitsu  yet,  so  we  can’t  com¬ 
ment  right  now,”  said  a 
spokeswoman  at  Nanya’s 


headquarters  in  Taoyuan,  Taiwan. 

■  MARTYN  WILLIAMS  AND  DAN  NYSTEDT, 
IDG  NEWS  SERVICE 


Vendor’s  CEO  Gives  Up 
Taiwanese  Citizenship 

TAIPEI 

he  head  of  China’s  largest  chip 
maker  has  applied  to  give  up  his 
Taiwanese  citizenship  after  a  spat 
with  the  island’s  government.  The 
move  highlights  the  troubles  that  chip 
industry  workers  from  Taiwan  face 
when  doing  business  in  China. 

Richard  Chang,  CEO  of  Semiconduc¬ 
tor  Manufacturing  International  Corp., 
is  a  dual  citizen  of  the  U.S.  and  Taiwan, 
where  he  worked  for  years  before 
founding  Shanghai-based  SMIC.  But 
his  involvement  in  SMIC 
riled  the  Taiwanese  gov¬ 
ernment,  which  has  strict 
rules  governing  how  and 
when  its  citizens  and 
Taiwan-based  companies 
can  invest  in  China’s 
semiconductor  industry. 

The  government  levied 
a  fine  of  5  million  new 
Taiwan  dollars  ($155,000 
U.S.)  against  Chang  in 
March,  saying  that  he 
failed  to  apply  to  authori¬ 


ties  before  investing  in  SMIC.  Chang 
was  given  six  months  to  withdraw  his 
investment  or  face  further  penalties. 
His  attorney  is  fighting  the  case  in 
Taiwan,  said  an  SMIC  spokesman. 

Taiwan  fears  that  chip  investments 
in  China  could  lead  to  job  losses  and 
that  its  technology  could  be  used  to 
bolster  Chinese  military  prowess. 

■  DAN  NYSTEDT.  IDG  NEWS  SERVICE 


Motorola  Says  No  to 
Manufacturing  in  India 

BANGALORE,  INDIA 

otorola  inc.  plans  to  increase 
its  staff  in  India  by  about  1,000 
by  the  end  of  next  year,  accord¬ 
ing  to  Chairman  and  CEO  Edward  Zan¬ 
der.  But  the  company  has  ruled  out 
plans  to  manufacture  telecommunica¬ 
tions  equipment  in  India,  although  it 
might  look  at  doing  some  “back-end 
assembly”  in  the  country,  Zander  told 
reporters  here  last  week. 

Schaumburg,  Ill.-based  Motorola 
currently  employs  2,900  people  in 
India  —  2,500  at  its  research  and  de¬ 
velopment  centers,  and  the  rest  in 
sales,  marketing  and  support  positions. 
Some  1,100  Motorola  employees 
are  also  working  on  projects  with 
software  development  outsourcing 
companies  in  India,  according  to  Amit 
Sharma,  vice  president  of  Motorola 
India.  O  56412 

■  JOHN  RIBEIRO,  IDG  NEWS  SERVICE 


Compiled  by  Mike  Bucken. 


GLOBAL  FACT 


Projected  compound 
annual  growth  rate  in 
spending  on  Ethernet 
switches  in  the  Asia- 
Pacific  region  from 
2004  through  2009. 

Source:  Gartner  Inc. 


Briefly  Noted 

SoftMaker  Software  GmbH  in 

DUsseldorf,  Germany,  last  week 
unveiled  the  beta  version  of  a  new 
release  of  its  Windows-based 
TextMaker  word-processing  soft¬ 
ware.  TextMaker  2005  is  priced  at 
$49.50  and  can  also  run  on  the 
Linux,  Windows  Mobile,  Qtopia  and 
FreeBSD  operating  systems. 

■  JOHN  BLAU,  IDG  NEWS  SERVICE 


Unisys  Corp.  last  week  signed  a 
contract  extension  to  manage  call 
center  services  for  Compania 
Anonima  Nacional  Teiefonos  de 
Venezuela,  a  telephone  service 
provider.  Under  the  deal,  valued  at 
about  $12  million  over  two  years, 
Unisys  will  continue  to  provide  ser¬ 
vices  ranging  from  operator  assis¬ 
tance  to  customer  service. 


Rambus  Inc.  and  United  Micro¬ 
electronics  Corp.  have  inked  a  deal 
for  Rambus  to  provide  its  PCI  Ex¬ 
press-based  chip-to-chip  intercon¬ 
nects  to  the  Taiwanese  chip  maker. 
Los  Altos,  Calif.-based  Rambus 
announced  last  month  that  it  had 
souped  up  its  memory  technology 
to  improve  picture  quality  in  game 
consoles  and  high-end  PCs. 

■  DAN  NYSTEDT,  IDG  NEWS  SERVICE 


IBM  Tivoli  Unveils  CDP  Security  Tool  for  the  Masses 


Product  protects 
laptop,  PC  data 

BY  LUCAS  MEARIAN 

IBM  last  week  released  a  new 
data-protection  product  that 
keeps  a  copy  of  files  as 
changes  are  made,  allowing 
users  to  dial  back  to  recover 
any  version  of  a  document 
they  want  on  local  disks  and 
on  network  servers. 

IBM  said  its  new  software, 
called  Tivoli  Continuous  Data 
Protection  for  Files,  provides 
real-time  data  backup  for  lap¬ 
tops,  PCs  and  file  servers  by 
continuously  protecting  infor¬ 
mation  from  computer  virus¬ 
es,  file  corruption,  accidental 
deletion  or  theft  of  a  laptop. 

Continuous  data  protection 


(CDP),  or  time-addressable 
storage,  saves  all  changes  at 
the  bit  level,  time-stamps  them 
and  moves  them  off  to  local  or 
networked  disk  to  be  stored. 

If  a  data  restore  is  required, 
an  end  user  or  systems  admin¬ 
istrator  can  literally  dial  back 
an  application  to  any  point  in 
time,  even  to  seconds  before  a 
virus  struck  a  server. 

Walter  Grey,  IT  manager  at 
Consigli  Construction  Co.  in 
Milford,  Mass.,  rolled  out 
IBM’s  CDP  software  about  a 
month  ago  to  the  laptops  of 
half  of  the  company’s  150  field 
workers.  He  plans  to  Finish  the 
rollout  over  the  next  several 
months.  So  far,  Grey  said,  he 
likes  the  product’s  ease  of  use, 
as  well  as  the  cost  and  time 
savings  it  brings  his  company. 


Backing  up  laptops  used  to 
be  a  full-time  job  at  Consigli, 
because  Grey  had  to  send  a 
technician  into  the  field  to 
back  up  each  machine  manu¬ 
ally.  Now,  when  users  log  onto 
the  company’s  intranet  via  a 
virtual  private  network,  local 
files  are  automatically  backed 
up  to  a  file  server,  which  repli¬ 
cates  the  data  to  a  back-end 
disk  array,  he  said. 

Grey  said  the  product 
“doesn’t  take  a  lot  of  resources 
out  of  the  machines  and  does 
the  backup  transparently.  The 
fact  that  it  does  it  transparent¬ 
ly  is  key.  I  don’t  want  [end 
users]  to  know  how  it  works.” 

Brian  Babineau,  an  analyst 
at  Enterprise  Strategy  Group 
Inc.  in  Milford,  said  the  only 
unique  aspect  of  IBM’s  ver¬ 


sion  is  that  data  can  be  backed 
up  both  locally  and  over  an  en¬ 
terprise  network.  “It’s  an  in¬ 
cremental  market  for  those 
vendors  who  already  have  a 
backup  product,”  he  said. 

Competitors’  CDP 

Babineau  said  Microsoft  Corp. 
is  expected  to  announce  its 
own  CDP  product  soon,  and 
he  anticipates  that  EMC  Corp. 
will  resell  another  vendor’s 
CDP  product.  Veritas  Software 
Corp.  has  already  announced 
plans  to  ship  CDP  products  in 
2006  with  two  new  backup 
applications  code-named 
Panther  and  Bighorn. 

Chris  Stakutis,  chief  tech¬ 
nology  officer  of  the  new  IBM 
Tivoli  Software  offering,  said 
the  software  can  also  be  con¬ 


figured  to  save  files  in  write- 
once,  read-many  mode  for 
data  protection  purposes. 

Stakutis  said  all  previous 
versions  of  a  file  are  kept  in  a 
folder  tree,  and  the  software 
tags  the  file  with  a  sequence 
number  for  easy  retrieval.  The 
files  are  then  presented  in  or¬ 
der  of  the  date  and  time  they 
were  created. 

Pricing  for  IBM's  CDP  starts 
at  $35  for  the  desktop  version 
and  $995  for  file  servers. 

©  56459 


Correction 

IN  THE  AUG.  8  Page  One  star)' 
“Users  Speed  Feeds  to  Data 
Warehouses,”  the  name  of  Jack 
Garzeila,  vice  president  of  data 
warehousing,  reporting  and  ana¬ 
lytics  at  Overstock.com  Inc ,  was 
misspelled. 
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VPNs 

applications,  Akyuz  added. 

In  another  new  deal,  MCI 
Inc.  last  week  announced  a 
contract  with  AMF  Bowling 
Worldwide  Inc.  in  Richmond, 
Va.,  to  connect  350  bowling 
alleys  via  MCI’s  IP  VPN 
Broadband  Service.  The  VPN 
setup  will  replace  a  satellite 
communications  system  that 
sometimes  suffers  from  slow 
performance,  said  Rohana 
Meade,  vice  president  of  IT 
at  AMF. 

The  deal  between  AMF  and 
MCI  is  valued  at  $1.27  million 
over  three  years.  Akyuz  said 
the  annual  cost  to  Stride  Rite 
for  its  VPN  will  be  about 
$400,000  under  a  two-year 
contract  with  Paris-based  car¬ 
rier  Equant  Inc.  and  GoRe- 
mote  Internet  Communica¬ 
tions  Inc.,  a  managed  services 
provider  in  Milpitas,  Calif. 

According  to  both  Akyuz 
and  Meade,  cost  was  a  major 
factor  in  their  companies’  deci¬ 
sions  to  choose  VPN  services. 

AMF  looked  at  connecting 
its  bowling  centers  via  frame 
relay  a  year  ago,  but  that 
would  have  been  “at  least 
twice  as  expensive”  as  the  IP 
VPN  approach,  Meade  said. 

At  Stride  Rite,  Equant  has 
provided  a  frame-relay  con¬ 
nection  to  manufacturing  sites 
in  China  for  the  past  two 
years,  allowing  shoe  designers 
in  the  U.S.  to  talk  with  plant 
managers  via  videoconference 
links,  Akyuz  said.  He  added 
that  Stride  Rite  considered 
various  alternatives  for  con¬ 
necting  its  stores,  but  “at  the 
end  of  the  day,  [a  VPN]  was 
the  best  solution.” 

VPN  Advantages 

Nearly  all  the  major  network 
service  providers  are  market¬ 
ing  IP  VPN  offerings  as  a  re¬ 
placement  for  frame  relay, 
said  Ron  Kaplan,  an  analyst  at 
IDC  in  Framingham,  Mass. 
Kaplan  said  VPNs  are  usually 
less  expensive  than  frame- 
relay  networks,  although  the 
cost  differences  have  nar¬ 
rowed  as  carriers  have  low¬ 
ered  "he  price  of  frame  relay 
to  keep  it  competitive. 


Sales  of  IP  VPN  services  in 
the  U.S.  last  year  amounted  to 
$640  million,  according  to 
IDC,  which  forecasts  that 
sales  will  grow  to  $3.3  billion 
in  2009  —  an  annual  growth 
rate  of  nearly  40%.  This  year, 
sales  are  expected  to  total  just 
over  $1  billion,  Kaplan  said. 

Meanwhile,  the  number  of 
frame-relay  ports  is  declining. 
IDC  counted  1.3  million  ports 
in  the  U.S.  last  year,  a  number 
that  is  expected  to  drop  to 
1.2  million  this  year  and  fall  to 
751,000  in  2008,  said  analyst 
Steven  Harris.  “Frame  [relay] 
is  definitely  decreasing,  and 
more  and  more  carriers  are 
eliminating  it  completely,” 
he  said. 

An  IDC  survey  of  400  U.S. 
companies  that  was  released 


BY  LUCAS  MEARIAN 

Sun  Microsystems  Inc.’s  $4.1  bil¬ 
lion  acquisition  of  Storage  Tech¬ 
nology  Corp.  is  expected  to 
close  next  month,  leaving  in  its 
wake  a  smaller  inde¬ 
pendent  tape-vendor 
market.  Mark  Canepa, 
executive  vice  president 
of  the  Network  Storage 
Products  Group  at  Sun, 
spoke  with  Computer- 
world  last  week  about 
how  the  company  plans 
to  incorporate  Storage- 
Tek  into  its  storage  operation. 

What  is  your  overall  strategy  for 
incorporating  StorageTek  into 
Sun?  We  have  15  teams  that 
are  part  of  the  integration 
process.  Each  is  chartered 
with  finding  cost  synergies 
in  their  area  but  also  finding 
the  revenue  synergies. 

How  many  workers  will  be  laid  off 
as  a  result  of  this  acquisition? 

We  don’t  know  that  yet.  Obvi¬ 
ously,  it  would  be  very  pre¬ 
mature  to  discuss  that  now  as 
we’re  trying  to  operate  as  two 
separate  companies.  You  can 
imagine  the  disruption  that 
could  have  in  both  companies. 
Once  we  close,  we’ll  be  able 
to  look  at  it  in  more  detail  and 
be  able  to  make  some  more- 
explicit  announcements. 


STRIDE  RITE’S  VPN  will  support 
a  new  point-of-sale  system 
and  added  applications,  says 
CIO  Yusef  Akyuz. 


in  June  found  that  IP  VPNs 
had  become  the  third  most 
popular  primary  WAN  config- 


How  will  StorageTek  boost 
your  storage  strategy?  We 

don’t  believe  we’re  product- 
constrained.  We  believe  we’re 
coverage-constrained.  Our 

products  and  solutions 
and  capabilities  are  in 
excess  of  the  size  of  the 
sales  force  we’ve  got 
out  there. 

The  first  thing  Stor¬ 
ageTek  brings  is  1,000- 
plus  salespeople,  which 
massively  increases  our 
coverage.  The  second 
thing  it  does  is  it  augments 
[the]  sales  reps  at  StorageTek. 
The  third  area  is  that  many 
StorageTek  [customers]  are 
not  Sun  customers. 

[This]  allows  us  to  expose 
[StorageTek  customers]  to 
more  than  just  mainframe 
servers.  Over  time,  we  believe 
that  can  yield  additional  rev¬ 
enue  synergies. 

How  do  you  convince  Sun’s 
300-person  sales  force  to  sell 
another  company’s  products? 

We’re  going  to  end  up  with 
one  storage  sales  force.  All  of 
a  sudden,  there’s  one  price  list. 
It’s  not  a  Sun  sales  rep  vs.  an 
STK  sales  rep.  They’re  all 
going  to  be  Sun  sales  reps.  It’s 
going  to  be  Sun’s  storage  prod¬ 
uct  price  list.  They’re  very 
rapidly  going  to  be  under 


uration,  behind  private  lines 
and  broadband  links.  Frame 
relay  was  fourth,  and  55%  of 
the  respondents  said  they 
plan  to  migrate  traffic  away 
from  that  technology  over  the 
next  two  years.  About  one- 
third  said  they  will  shift  to¬ 
ward  VPNs. 

Stride  Rite’s  IP  VPN  will 
allow  store  workers  to  check 
on  inventory  at  other  nearby 
locations  and  will  support  a 
new  customer-loyalty  pro¬ 
gram.  The  faster  perfor¬ 
mance  should  also  significant¬ 
ly  shorten  checkout  times  for 
shoppers,  with  the  payment 
process  “taking  seconds  in¬ 
stead  of  minutes,”  Akyuz  said. 

Meade  said  AMF’s  existing 
satellite  network  is  shared  by 
the  350  bowling  alleys,  with 


one  set  of  rules  and  quota. 

What’s  your  go-to-market  strate¬ 
gy  for  StorageTek’s  products? 

We’ve  been  [reselling]  a  num¬ 
ber  of  STK  products  for  a  long 
time.  For  a  number  of  other 
[products],  they’re  going  to  be 
on  the  Sun  price  list  for  the 
first  time  after  the  acquisition. 
A  lot  of  the  improvements  in 
our  go-to-market  strategy  is 
that  we  can  begin  to  broadcast 
a  much  broader  value  proposi¬ 
tion.  We  can  talk  about  [infor¬ 
mation  life-cycle  manage¬ 
ment]  in  much  broader  terms 
than  what  STK  would  do  all 
by  itself. 

Is  your  purchase  of  StorageTek 
a  foreshadowing  of  further  mar¬ 
ket  consolidation?  We  think 
the  IT  market  is  in  a  consoli¬ 
dation  phase.  Sun  CEO  Scott 
McNealy  talked  about  it.  He 
said  in  general  that  we  want  to 
be  one  of  the  consolidators  of 
the  IT  market.  We  intend  to 


HThe  first  thing 
StorageTek 
brings  is  1, 000-plus 
salespeople,  which 
massively  increases 
our  coverage. 


downlinks  running  at  up  to 
12Kbit/sec.  and  uplinks  as 
much  as  256Kbit/sec.  But  de¬ 
pending  on  how  many  end 
users  are  on  the  network  at 
once,  “it  could  be  very  fast  or 
very  slow,”  she  added. 

MCI’s  IP  VPN  service  will 
support  128Kbit/sec.  or  faster 
connections  to  each  facility, 
allowing  AMF  to  train  workers 
via  the  Web  and  add  a  cus¬ 
tomer  reservation  system  that 
lets  bowlers  book  lanes  online, 
Meade  said. 

Stride  Rite  plans  to  connect 
24  shoe  stores  to  its  VPN  by 
year’s  end  and  bring  the  rest 
online  by  mid-2006.  AMF  has 
connected  five  bowling  cen¬ 
ters  thus  far  and  plans  to  fin¬ 
ish  its  rollout  within  the  next 
12  months.  ©  56452 


be  on  the  consolidating  side 
of  all  of  this. 

With  Sun  buying  StorageTek  and 
EMC  partnering  with  ADIC,  there 
aren’t  a  lot  of  independent  tape 
vendors  out  there.  You’re  right. 
Right  now,  there’s  Quantum, 
ADIC,  IBM  and  Sun.  You  still 
have  Overland  [Storage]  out 
there.  We’re  definitely  going 
to  get  down  to  a  handful  of 
archival  companies. 

How  do  you  address  product 
overlap,  particularly  with  your 
content-addressed  storage  line? 

We’ve  been  working  pretty 
hard  on  that.  We’re  not  in  the 
position  of  revealing  any  data 
at  this  point.  What  I  can  tell 
you  is  you’re  going  to  find 
when  you  dig  into  this  stuff 
[that]  there’s  a  lot  less  overlap 
than  might  first  appear. 

You’ve  been  losing  market  share 
to  IBM,  EMC  and  Hewlett- 
Packard.  How  do  you  regain  it 
through  this  deal?  The  way  we 

gain  market  share,  we  believe, 
is  not  primarily  due  to  a  big¬ 
ger  product  line.  It’s  being 
able  to  get  feet  on  the  street. 
It’s  about  being  able  to  get 
a  sales  force  out  there  that 
can  go  toe  to  toe  with  the 
storage  sales  forces  of  our 
competitors.  ©  56440 


Sun  Exec  Expects  StorageTek  Buy  to  Revive  Sales 
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CABLE 


LOONEY  TUNES,  chsractors,  nsmes  and  alt  i  elated  indicia  are  trademarks  of  ana  ©We  * 
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Service  end  products  not  available  in  ail  areas. 


The  point  of  business  is  cost-effectively  connecting  enterprise  resources  to  better  serve  your  customers.  With  a  wholly  owned,  end-to-end 
network — backed  by  a  team  of  consultants  working  with  you  to  develop  the  optimal  solution  for  your  environment — Time  Warner  Cable  delivers 
reliable  business  communications.  Add  to  that,  standard  and  customized  SLAs,  along  with  a  full  suite  of  data,  video,  and  security  solutions — 
including  Metro  Ethernet,  Teleworker  Solutions,  Branch  Office  Connectivity — and  you  have  a  scalable  infrastructure  for  sharing  information, 
reducing  costs  and  realizing  the  value  on  your  IT  investment.  That's  the  point  of  business. 
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The  Search  War 


ANEW  battle  for  the  desktop  is  under 
way.  This  isn’t  your  old-fashioned  Linux 
or  Mac  vs.  Windows  tussle,  where  ar¬ 
cane  issues  over  operating  systems  en¬ 
thrall  systems  administrators  and  enthu¬ 
siasts  while  boring  everyone  else  to  tears.  This  turf 
war  is  about  things  that  matter  to  end  users,  which  is 
not  necessarily  the  best  news  for  IT. 


The  latest  salvo  in  the 
new  desktop  skirmish 
was  fired  by  Google  last 
week  when  it  released 
Desktop  2,  a  search  pro¬ 
gram  for  Windows  PCs, 
and  Google  Talk,  an  in¬ 
stant  messaging  client.  By 
combining  those  offer¬ 
ings  with  Gmail,  its  free 
e-mail  service,  Google 
now  is  kicking  at  Micro¬ 
soft’s  castle  gate,  an¬ 
nouncing  its  attack  upon, 
if  not  actually  threatening,  Red¬ 
mond’s  long  rule  over  the  desktop. 

Google,  of  course,  is  not  trying  to 
displace  Windows.  In  fact,  it’s  ex¬ 
ploiting  Windows  to  deliver  higher- 
level  services  that  end  users  desire. 
These  are  services  that  someday 
may  become  revenue  streams  for 
Google.  And  you  know  that  just 
grates  on  Microsoft. 

Desktop  2  is  appealing.  It  im¬ 
proves  the  lives  of  information  work¬ 
ers  by  combining  the  singularity  of 
information  on  their  own  machines 
with  the  panoply  of  sources  on  the 
World  Wide  Web  in  a  single  search. 

It  delivers  the  results  in  one  relative¬ 
ly  clutter-free  window.  It’s  simple, 
yet  amazingly  powerful. 

Desktop  2  comes  with  Sidebar,  a 
vertical  strip  that  anchors  the  side  of 
your  PC’s  display.  Within  its  tiered 
windows,  you  get  RSS  feeds,  news 
stories,  e-mail  from  your  Gmail  and 
Outlook  accounts,  weather  reports 
and  other  dynamic  content.  It’s  slick. 

Desktop  2  is  not  to  be  confused 
with  Desktop  Search  for  Enterprise, 
which  lacks  Sidebar  but  can  index  and 
search  everything  its  junior  partner 
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can,  as  well  as  content 
stored  in  Lotus  Notes. 
The  Enterprise  version 
also  gives  administrators 
critical  tools,  such  as  the 
ability  to  define  files  that 
aren’t  permitted  to  be  in¬ 
dexed  and  to  force  all  in¬ 
dexes  on  everyone’s  ma¬ 
chines  to  be  encrypted. 
Google  recommends  that 
you  do  this. 

Individuals  can  down¬ 
load  the  Enterprise  ver¬ 
sion,  just  as  they  can  the  consumer- 
oriented  Desktop  2,  and  use  it  on 
their  own  systems.  My  limited  use 
of  both  tools  leads  me  to  conclude 
that  they,  or  something  very  much 
like  them,  will  become  de  facto  on 
corporate  machines.  That’s  because 
they  are  useful  and  easy  to  use. 

From  IT’s  perspective,  though, 
Desktop  2  and  Desktop  Search  for 


Enterprise  are,  at  best,  more  software 
you’ll  need  to  understand,  if  only  for 
the  sake  of  handling  queries  from  the 
clueless  end  users  who  haunt  our 
Shark  Tank  each  week.  At  worst, 
these  indexing  programs  might  be¬ 
come  another  security  headache. 

I  suggest  that  you  get  a  head  start 
on  your  end  users  and  quickly  roll 
out  Desktop  Search  for  Enterprise, 
or  a  comparable  desktop  search 
product  that  also  efficiently  searches 
online.  (And  no,  the  stupid  puppy 
that  comes  with  Windows  XP  does 
not  qualify.)  If  that’s  not  possible,  at  a 
minimum  set  companywide  policies 
for  how  those  tools  should  be  set  up. 
Make  encryption  mandatory.  It  does 
slow  down  retrieval  a  bit,  particularly 
when  Notes  files  are  being  searched, 
but  few  end  users  will  complain. 

Another  problem  I  foresee  for  IT 
is  that  once  users  get  accustomed  to 
searching  their  desktop  apps  along 
with  the  Internet  for  content,  they’ll 
be  asking  for  you  to  use  Google’s  (or 
whoever’s)  APIs  to  include  corpo¬ 
rate  apps  in  the  single-search  proc¬ 
ess.  That’s  more  work  and  another 
security  hole  to  cover. 

Is  this  potential  troublemaker  of  a 
tool  worth  it?  Yes,  every  penny.  I  did 
tell  you  that  it’s  free,  right?  0  56422 


Don  Tennant  will  return  next  week. 


Vendors  Are 
Keeping  Too 
Many  Rights 

WHEN  I  CONSIDER 
the  big  issues  in  the 
world  of  informa¬ 
tion  technology  and  policy,  I 
invariably  return  to  a  single 
word:  control. 

Control  encompasses  any  number  of 
things.  But  as  we  move  into  an  era  of 
increasing  digital  content  in  our  every¬ 
day  lives  and  jobs,  at  the  top  of  the  list 
is  the  question  of  who’s  in  charge  of 
information. 

At  one  time,  we  imagined  that  we 
were.  We’d  buy  a  product,  and  if  we 
wanted  to  tinker  with  it,  that  was  no 
one’s  business  but  our  own.  Now,  as 
ones  and  zeroes  become  embedded  in 
everyday  products  and  services,  we  an¬ 
swer  to  the  sellers  as  much  as  the  oth¬ 
er  way  around. 

Technology  ven¬ 
dors  strive  for  lock- 
in.  They  lock  us  in 
with  obvious  tricks, 
such  as  Microsoft 
with  its  file  formats, 
a  monopoly  mecha¬ 
nism  as  pervasive  as 
its  Windows  desktop 
control.  They  con¬ 
trol  us  with  digital 
rights  management 
(DRM,  more  proper¬ 
ly  called  digital  re¬ 
strictions  manage¬ 
ment)  schemes  that 
force  us  to  break  the  law  to  make  back¬ 
ups  or  even  to  quote  from  other  works. 

They  forbid  us  from  tweaking  or 
substituting,  as  ink-jet  printer  compa¬ 
nies  try  to  do  when  they  misuse  copy¬ 
right  laws  to  make  life  hard  for  other 
companies  that  want  to  sell  us  cheaper 
ink.  They  create  cartels  and  impose 
rules  like  the  DVD  regional  coding 
scheme,  which  keeps  us  from  watching 
a  movie  we  buy  in  Europe  on  a  DVD 
player  we  bought  in  the  U.S. 

Governments  do  their  part.  They  use 
regulations  to  keep  vital  technology 
from  becoming  ubiquitous,  such  as  the 
U.S.  government’s  export-control  re¬ 
strictions  that  still  give  most  e-mail 
messages  all  the  data  security  of  post¬ 
cards.  It  just  goes  on  and  on. 
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The  most  onerous  controls  are  be¬ 
ing  exerted  against  the  least  powerful 
players  in  this  game:  end  users,  who 
have  the  least  individual  leverage 
against  big  companies  and  govern¬ 
ments.  IT  has  more  leverage  because 
it’s  a  bigger  customer. 

No  doubt,  some  in  the  IT  communi¬ 
ty  have  used  their  leverage  wisely, 
though  the  typical  outcome  seems  to 
be  a  price  reduction  from  vendors,  not 
any  serious  divesting  of  vendor  con¬ 
trol.  It’s  not  hard  to  understand  why. 
The  path  of  least  resistance  is  always 
alluring  when  budgets  and  time  are 
constrained.  It  was  once  true  that  no 
one  got  fired  for  buying  IBM,  partly 
because  IBM,  for  all  its  monopolistic 
reach  at  the  time,  did  a  pretty  good  job. 
For  all  its  ruthless  business  practices, 
Microsoft  has  been  steadily  improving 
products  aimed  at  enterprises. 

The  move  toward  open-source  soft¬ 
ware  has  been  one  of  the  truly  hearten¬ 
ing  occurrences  in  recent  times.  IT  has 
seen  the  financial  advantages,  which 
may  not  be  as  overwhelming  as  open- 
source  advocates  claim  but  are  none¬ 
theless  real  in  many,  if  not  most,  cases. 

More  important  is  the  open-source 
advantage  in  the  freeing  of  data  and 
choice.  Portability  is  the  most  essential 
escape  valve  in  any  data  relationship.  If 
you  can  move  it  without  incurring 
massive  costs,  you  have  leverage.  If 
you  can’t,  you  don’t.  With  open-source 
products,  you  do. 

I  have  no  religious  attachment  to 
open-source  vs.  proprietary  software.  I 
use  both.  But  I  consider  my  data  mine, 
period,  just  as  I  consider  it  my  right  to 
back  up  what  I  buy  and  quote  from  oth¬ 
ers’  work  —  with  appropriate  citation 
—  in  creating  new  works  of  my  own. 

The  technology  and  entertainment 
industries  don’t  believe  in  such  rights. 
For  everyone’s  sake,  I  hope  IT  will 
fight  back,  and  hard.  ©  56373 
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Fewer  CS 
Majors  Not  a 
Big  Concern 


MY  NEPHEW  Matthew 
is  21,  an  age  when 
anyone  who  knows 

how  to  cook  is  his  best  friend. 
He  has  stopped  growing,  at  6  feet  3 
inches  tall,  but  he’s  still  as  skinny  as  a 
fishing  pole.  I  love  to  cook,  and  at  a 


recent  family  reunion,  he 
joined  me  in  the  kitchen. 

I’d  read  that  graduation 
rates  for  women  in  comput¬ 
er  science  were  still  hover¬ 
ing  around  25%  and  that 
overall  graduation  rates  for 
computer  science  majors 
had  declined  from  a  high 
point  in  2000.  Since  Mat¬ 
thew  is  currently  in  college, 

I  asked  him  for  his  observa¬ 
tions  and  why  he  hadn’t  tak¬ 
en  up  computer  science. 

I  was  pleasantly  surprised 
to  find  that  his  roommate  is  in  com¬ 
puter  science.  Matthew  told  me  he’s 
really  into  gaming  and  entered  com¬ 
puter  science  as  a  back  door  into  mak¬ 
ing  money  in  gaming.  Yes,  there  are 
quite  a  few  women  in  the  classes,  but 
male  or  female,  they  all  look  the  same 
to  Matthew:  pale,  out  of  shape  and 
with  long  fmgernails.  These  men  and 
women  aren’t  antisocial.  That  myth 
was  busted  when  advanced  games 
started  to  be  played  over  networks  and 
the  gamers  all  began  to  interact  online. 

Matthew  said  he  isn’t  in  computer 
science  because,  well,  the  lifestyle  isn’t 
for  him.  He  needs  something  more 
active,  interactive  and  tactile. 

Matthew’s  story  of  his  roommate 
echoed  one  I  had  heard  at  dinner  a  few 
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weeks  earlier  from  a 
friend’s  son.  He,  too,  had 
decided  to  enter  computer 
science  so  that  he  could  do 
computer  gaming. 

As  someone  who  years 
ago  started  playing  Pong 
and  later  spent  many,  many 
hours  expanding  houses  in 
The  Sims  and  shooting 
beasts  in  Diablo  II,  I  under¬ 
stand  why  kids  would  want 
to  be  computer  game  de¬ 
signers  and  builders.  It’s 
just  that  very  few  of  these 
skills  are  useful  in  the  corporate  world. 
(OK,  there  is  a  parallel  that  involves 
bathroom  breaks.  Neglect  them  in  a 
long  meeting  or  with  your  Sim,  and 
bad  things  happen.) 

Are  all  computer  science  students 
gamers?  Of  course  not.  But  I  think  that 
these  two  young  men  are  not  atypical 
in  wanting  to  build  a  career  around 
an  enjoyable  diversion.  After  all,  mak¬ 
ing  a  career  around  what  you  like  is 
exactly  what  the  book  What  Color  Is 
Your  Parachute?  is  all  about.  Outside 
of  simulation  training,  though,  gaming 
skills  don’t  help  corporations.  In  fact, 
very  few  computer  science  degrees 
are  useful  to  most  corporations. 

Corporations  need  accountants, 
marketers,  and  operations  and  manu¬ 


facturing  staffers  who  are  infused  with 
computer  skills.  The  PC  and  Internet 
revolutions  have  been  all  about  mov¬ 
ing  information  closer  to  the  decision¬ 
maker  and,  in  the  corporation,  closer 
to  those  who  need  the  data. 

So  is  it  a  problem  that  fewer  stu¬ 
dents  are  graduating  with  computer 
science  degrees?  Absolutely  not.  If  we 
assume  that  a  capitalist  society  will 
continue  to  reward  innovation  and 
protect  intellectual  property,  then  the 
best  minds  will  continue  to  migrate  to 
the  best  research  centers,  regardless  of 
where  one  graduates. 

Much  has  been  said  about  the  Uni¬ 
versity  of  Florida  study  on  the  effect  of 
video-game  violence  on  children.  Just 
as  I  wouldn’t  take  Matthew’s  7-year-old 
cousin  to  an  R-rated  film,  I  wouldn’t  let 
her  play  Doom  or  Grand  Theft  Auto, 
regardless  of  how  much  I  enjoy  the 
games  myself.  But  I  am  encouraging 
her  to  play  Sims  and  the  huge  stash  of 
computer  learning  games  that  her  fam¬ 
ily  has  given  her.  With  gaming,  we  old¬ 
er  ITers  have  found  the  way  to  win  the 
hearts  of  teenagers  and  twentysome- 
things  everywhere.  ©  56361 
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Wireless  or  Not,  Trespassing  Is  Wrong 


HOORAY  for  Richard  Dinon  and 
the  St.  Petersburg,  Fla.,  police 
[“Man  Arrested  for  Hopping  Onto 
Home  Wi-Fi  Network,”  QuickLink 
55503],  I  hope  that  the  state  attor¬ 
ney  prosecutes  this  criminal  to  the 
full  extent  of  the  law. 

I  am  especially  appalled  by  the 
comments  of  Ken  Dulaney  of  Gart¬ 
ner,  who  blames  the  homeowner 
for  being  the  victim  of  the  crime 
perpetrated  upon  him.  Would  Du¬ 
laney  feel  the  same  if  his  home 
were  broken  into  or  his  identity 
stolen?  Those  acts,  and  the  access¬ 
ing  ot  another's  wireless  network 
without  permission,  are  crimes,  and 
if  they  were  not  criminal  they  would 
still  be  unethical. 

My  guess  is  that  Dulaney’s  opin¬ 
ion  does  not  align  exactly  with  Gart¬ 
ner  corporate  policy,  if  I  were  to 
gain  access  to  Gartner  assets  ille¬ 
gally,  would  the  company  feel  that  I 
then  had  the  right  to  sell  them  be¬ 
cause  Gartner  did  not  protect  them 
well  enough?  There  may  be  differ¬ 


ences  between  the  real  and  virtual 
worlds,  but  in  either  case,  taking 
what  belongs  to  others  is  wrong. 

Daniel  A.  Combs 

President, 

Global  Identity  Solutions  LLC, 
Falls  Church,  Va.,  dan.combs@ 
globalidentitysolutions.com 


Old  Lessons  Anew 

T  SHOULD  NOT  be  surprising 

that  consumers’  responses  to  pri¬ 
vacy  breaches  are  similar  to  their  re¬ 
sponses  to  other  attacks  on  their 
sense  of  personal  security  [“Opin¬ 
ion:  After  a  Privacy  Breach,  How 
Should  You  Break  the  News?” 
QuickLink  55301],  Though  the 
Ponemon  Institute’s  findings  ap¬ 
pear  to  be  among  the  first  to  ask 
these  kinds  of  questions  in  situa¬ 
tions  involving  IT  and  the  financial 
industry,  these  results  aren’t  sub¬ 
stantially  different  from  findings 
about  consumer  relations  following 
the  Tylenol  and  Excedrin  scares  of 


the  last  century.  Two  of  the  funda¬ 
mental  findings  in  those  situations, 
taught  at  virtually  every  business 
school  today,  are  that  the  compa¬ 
nies  whose  products  are  involved 
must  be  proactive  about  resolving 
the  problem  and  must  take  a  pro¬ 
active  approach  to  preventing  fur¬ 
ther  breaches. 

V.  Hetrick 
Los  Angeles 


A  Home  on  the  Web 
For  OS/2  Refugees 

OS/2  USERS  [“OS/2  Loyalists 
Remain  as  the  Operating 
System  Fades  Away,”  QuickLink 
54736]  still  have  a  home  on  Com¬ 
puServe  in  the  OS  Refuge  folder  of 
the  Linux  Forum  [QuickLink  a6920]. 
Members  of  CompuServe's  former 
OS/2  forums  still  drop  by.  The  Linux 
Forum  manager  is  one  of  the  "OS/2 
advisers”  of  the  late  OS/2. 

Doug  Yriart 

Manager,  CompuServe 
Linux  Forum,  Washington, 
dyriart@compuserve.com 


Ham  Radio  Can 
Help  in  Emergency 

THE  ANSWER  to  the  problem 
outlined  in  the  story  “Attack  in 
U.S.  Would  Tax  Emergency  Track¬ 
ing  for  Cell  Phone  Users”  [Quick¬ 
Link  a6810]:  Acquire  an  amateur 
radio  license.  This  will  give  a  person 
worldwide  communications  with 
just  a  small  radio. 

Kevin  Adam 
Fort  Wayne,  Ind., 
n9iww@verizon.net 
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Fr:  being  alone  with  your  information  management  challenges 


To:  getting  all  the  help  you  need 


EMC  SERVICES  CAN  HELP  YOU  GET  MORE  FROM  YOUR  INFORMATION.  With  EMC,  you  get  the  combined 
expertise  of  over  7,000  consultants,  specializing  in  everything  from  comprehensive  analysis  and  long-term 
planning  to  proven  implementation  and  support.  It’s  the  insight  you  need  to  archive  information  efficiently, 
enable  compliance,  maintain  business  continuity,  and  take  on  new  challenges.  And  it’s  the  first  step  toward 
creating  an  information  lifecycle  management  strategy  that  fits  your  business.  To  put  EMC’s  award-winning 
services  to  work  for  you,  visit  www.EMC.com/services. 
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Up  to  Capacity 

Capacity  planning  helps  companies 
locate  current  bottlenecks  or 
wasted  capacity,  as  well  as 
strategize  to  meet  future 
infrastructure  needs.  Page  24 


QUICKSTUDY 

Protocols 

A  protocol  is  a  set  of  formal  rules  that 
describe  how  devices  or  software  can 
exchange  information  with  one  another 
across  a  computer  or  communications 
network.  Page  27 


SECURITY  MANAGER'S  JOURNAL 

Peers  Say  Cisco  Ended  Up 
Wearing  the  Black  Hat 

After  the  brouhaha  over  the  Cisco 
IOS  vulnerability,  C.J.  Kelly  asks 
some  of  her  colleagues  what  they 
think  of  the  situation.  Page  28 


Massive  throughput  and 
the  ability  to  add  capacity 
on  the  fly  are  making  clus¬ 
tered  storage  an  attractive 
option.  By  Lucas  Mearian 


Russ  miller  runs  a  monster  of  a  serv¬ 
er  cluster  that  eats  storage  at  an 
incredible  rate.  The  bandwidth  re¬ 
quirements  alone  on  his  22TFLOPS 
system  force  Miller  to  look  outside  the 
storage  box,  so  to  speak,  for  better  throughput  and 
scalability. 

As  the  director  of  the  Center  for  Computational 
Research  at  the  University  at  Buffalo,  Miller  over¬ 
sees  a  supercomputer  comprising  6,600  processors 
that  is  used  by  the  university  and  many  businesses 
in  western  New  York. 

To  support  all  that  computational  power,  Miller 
turned  to  a  clustered  storage  system  that  could  alle¬ 


viate  bottlenecks  and  automatically  load-balance 
and  grow  on  the  fly  to  accommodate  user  demand. 

Like  many  IT  managers  who  have  seen  the  bene¬ 
fits  of  server  clusters,  Miller  chose  to  try  the  rela¬ 
tively  new  technology  of  storage  clusters  as  a  means 
of  attaining  a  fully  redundant  infrastructure  that’s 
highly  scalable  and  easy  to  manage.  Clustering  pro¬ 
vides  massive  throughput  because  of  an  increased 
port  count  that  comes  from  cobbling  many  storage 
servers  together  into  a  single  pool  of  disks  and  proc¬ 
essors,  all  working  on  a  similar  task  and  all  able  to 
share  the  same  data. 

Management  functions  are  distributed  across  the 
storage  server  farm.  To  an  application  server,  the 
farm  looks  like  a  single,  block-level  storage  system. 
Storage  capacity  can  be  added  without  disrupting 
applications  running  on  the  cluster. 

There’s  lots  of  talk  about  storage  clustering 
among  vendors  these  days,  but  few  market  leaders 
have  fully  embraced  the  concept,  according  to  ana¬ 
lysts.  Most  of  the  development  is  still  being  led  by 
start-up  companies  such  as  Ibrix  Inc.,  Isilon  Systems 
Inc.  and  Intransa  Inc. 

In  April,  Miller  selected  a  system  from  Dell  Inc. 
and  Billerica,  Mass.-based  Ibrix  that  gave  him  stor¬ 
age  read  rates  of  2.3GB/sec.  and  about  half  that  rate 
for  data  writes  —  far  above  what  any  monolithic 
storage  array  could  produce,  he  says. 

“We  don’t  have  any  single  points  of  failure.  So  if 
and  when  we  need  to  make  additional  investments 
in  storage,  we  can  do  that  without  any  major  down¬ 
time  or  major  reconfiguration.  We  didn’t  see  any 
downside  to  going  this  route,”  Miller  says. 

Tony  Asaro,  an  analyst  at  Enterprise  Strategy 
Group  in  Milford,  Mass.,  agrees.  “The  beauty  of 
some  clustered  architectures  is  you  can  start  small 
and  grow  as  much  as  you  want,”  he  says. 

The  University  at  Buffalo’s  storage  cluster  consists 
of  three  EMC  CX700  storage  arrays,  each  with  70 
146GB  drives  that  are  managed  with  Ibrix’s  software. 

“If  one  of  these  I/O  nodes  goes  down,  we  won’t 
lose  anything  except  a  little  performance,”  says 
Miller. 

Ibrix  is  a  clustered  file  system  than  runs  on  hosts, 
but  it  can  also  run  on  storage  arrays.  For  example, 
the  internal  disk  drives  on  low-end  Dell  servers  can 
be  combined  to  create  a  storage  pool.  The  result  is  a 
compute  farm  that  also  clusters  its  storage.  “It  adds 
no  greater  complexity  by  adding  more  servers  to  the 
cluster,”  Miller  says. 

In  the  future,  he  notes,  the  university  will  consid¬ 
er  using  commodity  servers  to  create  a  storage 
cluster,  “so  long  as  the  system  meets  the  needs  of 
our  users  and  staff  in  terms  of  performance  and 
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reliability.” 

There’s  some  confusion  about  the 
definition  of  clustered  storage.  Ven¬ 
dors  describe  several  different  tech¬ 
nologies  as  clustered  storage  —  from 
disk  pooling  to  virtualization. 

A  true  storage  cluster  should  be  able 
to  scale  linearly  without  bottlenecks  or 
added  management  difficulty,  accord¬ 
ing  to  Enterprise  Strategy  Group’s 
Asaro. 

“NetApp  has  been  guilty  of  using  the 
word  clustering  for  many  years.  We 
used  to  use  it  as  a  fail-over  term,”  says 
Jeff  Hornung,  vice  president  of  enter¬ 
prise  file  services  and  storage  net¬ 
working  at  Sunnyvale,  Calif.-based 
Network  Appliance  Inc.  “Clustering 
for  scalability  is  what  we’re  talking 
about.” 

NetApp  offers  a  dual-node  cluster, 
or  two  network-attached  storage 
(NAS)  boxes  together  in  a  pair  that 
provide  greater  redundancy  but  don’t 
fit  what  Asaro  and  others  would  con¬ 
sider  a  true  cluster:  a  system  with  the 
ability  to  scale  linearly  without  adding 
complexity. 


Definition 


tem.  that  allows  users  to 
add  nodes,  all  of  which  ac¬ 
cess  the  same  pool  of  data. 
Arrays  work  together  as  an 
intelligent  team,  capable  of 
running  on  their  own  and 
communicating  with  other 
arrays  to  deliver  data  in 
response  to  user  needs. 


IBM’s  SAN  Volume  Controller  appli¬ 
ance  and  3Pardata  Inc.’s  Inserv  arrays 
allow  storage  clusters  to  grow  in  eight- 
node  increments,  but  data  sharing  is 
confined  within  those  eight  nodes. 
Other  companies,  such  as  Isilon,  Ibrix 
and  LeftEIand  Networks  Inc.,  allow 
clusters  to  grow  one  node  at  a  time, 
with  data  being  shared  throughout 
the  cluster,  no  matter  how  large  it 
becomes. 

Two  Categories  of  Clusters 

Clustered  storage  falls  into  two  cate¬ 
gories:  systems  that  combine  block- 
based  data  on  a  storage-area  network 
(SAN),  and  those  that  create  a  com¬ 


mon  file  name  space  across  NAS  filers. 

To  date,  most  of  the  major  storage 
vendors  —  Hewlett-Packard  Co.,  EMC 
Corp.,  Hitachi  Data  Systems  Corp.  and 
NetApp  —  have  released  technology 
that  can  virtualize  NAS  systems  by 
pooling  disk  capacity  behind  NAS  en¬ 
gines.  All  claim  to  be  developing  or 
evaluating  third-party  clustering  tech¬ 
nology  as  well.  Meanwhile,  start-ups 
such  as  Isilon,  PolyServe  Inc.  and 
Panasas  Inc.  are  already  offering  clus¬ 
tering  software  that  runs  across  Win¬ 
dows  and  Linux. 

Sonja  Erickson,  vice  president  of 
technical  operations  at  Kodak  Easy 
Share  Gallery,  a  service  of  Kodak 
Imaging  Network  Inc.  in  Emeryville, 
Calif.,  says  NAS  clustering  technology 
has  already  saved  her  company  hun¬ 
dreds  of  thousands  of  dollars  in  per¬ 
sonnel  costs  alone. 

The  Kodak  unit  uses  clustering  tech¬ 
nology  from  both  Seattle-based  Isilon 
and  Beaverton,  Ore.-based  PolyServe 
to  connect  hundreds  of  Wintel  servers 
at  Kodak  that  host  its  online  digital 
photo  image  service.  Erickson  has  a 
staff  of  five  people  to  manage  more 
than  a  petabyte  of  data  on  the  servers. 

“In  terms  of  staffing,  since  we  in¬ 
stalled  [a  NAS  cluster  from  Isilon]  a 
year  and  a  half  ago,  we’ve  hired  no  ad¬ 
ditional  staff,”  she  says.  “That’s  hun¬ 
dreds  of  thousands  of  dollars  saved.  In 
terms  of  efficiency,  it  takes  only  a  day 
to  get  the  systems  up  and  running.” 

Prior  to  installing  NAS  clusters, 
Erickson  used  direct-attached  SCSI 
arrays  that  lacked  scalability  and 
could  take  up  to  a  month  and  a  half  to 
get  online.  In  contrast,  the  PolyServe 
boxes  require  about  a  week,  and 
Isilon’s  take  about  a  day,  she  says. 

EMC  offers  clustering  technology  in 
its  Centera  content-addressed  storage 
array,  as  does  HP  through  its  Remote 
Installation  Service  platform.  Both 
products,  however,  are  targeted  at  on¬ 
line  archival  uses.  “These  are  clusters, 
but  the  object  is  not  performance,” 
says  Bob  Passmore,  an  analyst  at 
Gartner  Inc.  in  Stamford,  Conn. 

Most  of  the  large  vendors  are  inter¬ 
ested  in  using  Intel-powered  servers 
for  storage  clusters  because  of  the 
enormous  growth  in  the  use  of  Linux 
clusters  in  server  farms. 

“The  requirements  for  availability 
are  a  long  way  from  what  a  bank  would 
need.  Typically,  banks  are  looking  for 
tons  of  computing  and  storage  capaci¬ 
ty.  And  while  you  get  lots  of  perfor¬ 
mance,  the  trade-off  is  low  availability. 
IBM  has  a  group  focused  on  this  prob¬ 
lem,”  Passmore  says.  “But  we’re  going 
to  see  more  and  more  of  this  stuff,  es¬ 
pecially  the  cheap  nodes  used  to  create 
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storage  clusters.” 

Most  of  the  adoption  of  clustered 
storage  is  being  spurred  by  the  tech¬ 
nology’s  relatively  low  cost,  adequate 
performance  and  high  levels  of  redun¬ 
dancy  and  throughput. 

Reluctant  User 

Ron  Minnich,  team  leader  of  the  Clus¬ 
ter  Research  Lab  at  Los  Alamos  Na¬ 
tional  Laboratory  in  New  Mexico,  is  a 
reluctant  fan  of  clustered  storage  be¬ 
cause  it  scales  with  his  needs  and  gives 
him  the  throughput  to  support  a  1,024- 
node,  $6  million  Linux  server  cluster. 
The  cluster,  called  Tank,  works  as  a  su¬ 
percomputer  for  crunching  scientific 
equations. 

Tank  is  backed  by  a  64-node  storage 
cluster  from  Fremont,  Calif. -based 
Panasas. 

“In  terms  of  pricing,  it  cost  more 
than  a  NetApp  [NAS  array]  per  tera¬ 
byte,”  Minnich  says.  “I  have  it  mainly 
because  of  its  ability  to  sustain 
throughput  from  our  server  cluster, 
which  you  can’t  achieve  with  a  stan¬ 
dard  file  servers,  which  have  one  net¬ 
work  connection.” 

Minnich  says  that  each  of  the  stor¬ 
age  blades  on  the  Panasas  system  has 


an  individual  Gigabit  Ethernet  connec¬ 
tion,  giving  him  64  individual  network 
connections. 

“It’s  not  as  reliable  as  a  mature  prod¬ 
uct.  I  had  computers  when  [the  Net¬ 
work  File  System  protocol]  first  came 
out.  There  was  a  certain  failure  rate. 
This  system  is  like  the  early  failure  rate 
that  NFS  had  years  ago,”  he  says. 

Ron  Godine  Jr.,  manager  of  IT  opera¬ 
tions  at  Royal  Appliance  Manufactur¬ 
ing  Co.  in  Glenwillow,  Ohio,  had  been 
supporting  his  Oracle  lli  ERP  system 
with  two  EMC  Clariion  4700  arrays 
prior  to  buying  LeftHand  SAN  Filers, 
which  are  clustered  using  Microsoft 
Cluster  Server  for  high  availability. 

Godine  laments  that  each  time  he 
had  to  upgrade  his  EMC  array,  there 
was  an  arduous  series  of  planning  and 
implementation  steps  that  had  to  be 
carried  out  with  the  help  of  the  vendor. 
“It  became  a  fairly  drawn-out  process 
to  get  the  equipment  working  and 
figure  out  a  number  of  problems,” 
he  says. 

The  three-node  cluster  from  Boul¬ 
der,  Colo.-based  LeftHand  Networks 
gave  Godine  about  6TB  of  storage 
capacity  for  $31,000  —  about  half  the 
cost  of  his  EMC  arrays.  “And  the  main¬ 
tenance  is  significantly  cheaper,”  he 
says.  “I  was  able  to  get  the  equipment 
up  and  running  in-house.  We  thought 
we’d  done  something  wrong  because 
it  was  so  simple.” 

Godine’s  greatest  concern  in  moving 
away  from  time-tested  EMC  equip¬ 
ment  was  the  performance  on  the  new 
cluster  technology,  which  he  says  sur¬ 
prised  him. 

“We  found  performance  on  this  clus¬ 
ter  faster  than  local  disk  and  certainly 
much  faster  than  using  CIFS  [Common 
Internet  File  System]  on  these  mono¬ 
lithic  file-sharing  systems,”  says 
Godine,  who  adds  that  when  used  in 
the  SAN  configuration,  the  cluster  is 
comparable  to  monolithic  boxes. 

Godine  says  the  ability  to  scale  as 
needed  was  also  an  enormous  draw.  “If 
we  needed  more  bandwidth  to  hosts, 
we  could  do  it  by  adding  more  building 
blocks,”  he  says. 

In  theory,  managing  storage  clusters 
should  be  no  more  difficult  than  man¬ 
aging  a  single  array,  but  some  users  say 
their  management  interfaces  could  still 
use  some  tweaking. 

But  most,  like  Godine,  say  clustered 
storage’s  strengths  outweigh  its  draw¬ 
backs.  O  56197 
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lobal  oil  company  ConocoPhillips  was 
all  set  to  roll  out  SAP  AG’s  Business  In¬ 
formation  Warehouse  for  users  in  Perth, 
Australia,  but  the  early  reports  on  the 
project  weren’t  good. 

“This  was  a  high-profile  project,  and 
some  application  owners  were  telling  me 
that  the  network  had  a  15-second  delay,” 
6sg§  sayS  p)ave  strobel,  operations  supervisor 
in  ConocoPhillips’  global  information 
systems  network  operations  group. 

The  application  resided  on  servers  in  Bartlesville, 
Okla.,  where  Strobel  works,  with  a  2Mb it/sec.  El 
connection  to  Perth.  There  was  a  demand  for  more 
bandwidth.  But  a  new  international  circuit  would 
have  entailed  a  significant  multiyear  expense  and 
required  60  workdays  to  set  up,  meaning  it  wouldn’t 
be  ready  by  the  go-live  date. 

So  Strobel  handed  the  problem  off  to  Bethesda, 
Md.-based  Opnet  Technologies  Inc.,  which  had  been 
trying  to  sell  him  its  network  capacity  planning  soft¬ 
ware.  Opnet  did  some  packet  captures  and  ran  tests 
that  took  a  total  of  1,400  seconds  to  execute,  far  longer 
than  they  should  have. 

Opnet  took  the  test  results  and  modeled  what 
would  happen  if  the  bandwidth  to  Australia  was  in- 
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Companies  are  using 
capacity  planning  to  find 
bottlenecks  and  match 
IT  resources  to  business 

needs.  By  Drew  Robb 


creased  from  2Mbit/sec.  to  20Mbit/sec.  That  cut  only 
0.38  seconds  off  the  1,400  seconds.  Next,  it  modeled 
what  would  happen  if  the  capacity  was  cut  to  256Kbit/ 
sec.;  that  added  only  13  seconds  to  the  transaction,  a 
loss  of  less  than  1%.  “Bandwidth  clearly  wasn’t  the 
issue,”  says  Strobel. 

“When  we  looked  at  that  data  and  analyzed  it  with 
!pnet,  we  found  that  very  little  of  it  was  network  de- 
”  he  says.  “But  we  found  a  substantial  amount  of 
.  delay  was  on  the  servers  in  Bartlesville.” 

fixe  application  team  solved  the  problem  with  the 
servers,  Conoco-Phillips  didn’t  have  to  spend  money 
on  a  multiyear  contract  for  a  multimegabit  interna¬ 


tional  pipe,  and  Opnet  made  the  sale. 

Capacity  planning  —  the  process  of  predicting  IT 
needs,  often  with  the  help  of  software  —  has  long  been 
regarded  as  something  of  a  black  art.  The  feeling  was 
that  only  a  specialist  with  a  degree  in  statistics  could 
do  it,  and  even  then,  the  results  were  questionable. 

But  capacity  planning  tools  are  becoming  easier  to 
use,  and  companies  are  finding  that  they  can  help 
solve  a  wide  range  of  long-  and  short-term  bottle¬ 
necks.  Tools  now  autodiscover  network  devices  and 
connections,  for  instance.  And  pull-down  menus  al¬ 
low  for  quicker  configuring  of  models.  Since  those 
features  shorten  the  time  it  takes  to  run  scenarios 


and  provide  faster  answers,  the  tools  are  being  used 
to  solve  current  problems,  not  just  to  estimate  the 
upgrades  that  need  to  be  included  in  next  year’s  bud¬ 
get.  As  a  result,  the  software  is  no  longer  shelfware. 

“The  big  thing  that’s  new  in  the  area  of  capacity 
planning  is  that  people  are  actually  doing  it,”  says 
Laura  DiDio,  an  analyst  at  Yankee  Group  Research 
Inc.  in  Boston. 

But  as  the  tools  have  gotten  better,  the  systems 
they  need  to  model  have  gotten  more  complex.  In 
many  cases,  users  are  no  longer  just  trying  to  devel¬ 
op  a  utilization  trend  line  for  a  single  CPU  or  disk  ar- 

Continued  on  page  26 
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ray.  Instead,  they  might  need  to  model  a  multitiered 
Web  application  to  see  whether  the  latency  will 
come  from  the  database,  the  application  or  the  Web 
server.  And  virtualization  raises  its  own  challenges, 
since  in  that  case,  users  aren’t  modeling  against  a  set 
hardware  configuration. 

“As  the  environment  becomes  more  virtualized 
and  companies  take  on  dynamic  provisioning,  it  is  a 
whole  different  story,”  says  Audrey  Rasmussen,  a 
vice  president  at  Enterprise  Management  Associates 
Inc.  in  Boulder,  Colo.  “The  infrastructure  will  be 
morphing  and  changing  so  rapidly  that  a  lot  of  ca¬ 
pacity  planning  methods  will  become  irrelevant  be¬ 
cause  they  can’t  keep  up  with  the  speed  of  change.” 

A  service-oriented  architecture  adds  its  own  wrin¬ 
kle.  “Then  you  don’t  have  control  over  the  infrastruc¬ 
ture  or  even  visibility  into  it,”  Rasmussen  says,  “par¬ 
ticularly  if  you  are  subscribing  to  a  service.” 

Getting  the  Data 

The  process  of  creating  an  accurate  and  useful  ca¬ 
pacity  plan  begins  long  before  you  start  modeling  the 
network  or  servers.  First,  companies  need  accurate 
information  on  what  they  have,  how  it’s  being  uti¬ 
lized  and  how  well  it’s  performing.  While  this  used 
to  be  a  time-intensive  manual  task,  it  can  now  be 
done  automatically,  so  capacity  planners  can  just 
click  on  the  items  they  want  to  include  in  a  model. 
Similarly,  gathering  performance  metrics  can  also  be 
a  routine,  ongoing  activity. 

Pat  Moffett  is  a  consulting  engineer  for  capacity 
planning  at  Norcross,  Ga.-based  CheckFree  Corp., 
which  provides  electronic  bill-paying  services  and 
software.  He  pulls  performance  data  from  nearly  500 
Linux,  Unix  and  Windows  servers,  as  well  as  three 
IBM  z/OS  mainframes,  into  an  IT  resource  manage¬ 
ment  (ITRM)  data  warehouse  from  SAS  Institute  Inc. 
About  300GB  of  data  is  pulled  in  daily  and  incorpo¬ 
rated  into  daily,  weekly  and  monthly  summaries.  The 
database  also  contains  business  metrics  and  forecasts. 


MAKING  PUNS 


Capacity  planning 
options  include 
the  following: 


•  Performance  trending:  Graphing  past  performance 
and  utilization  statistics  and  using  these  to  predict  when 
you  will  need  to  add  more  capacity.  This  can  be  done 
using  one  or  more  variables. 

•  Load  testing:  Testing  a  piece  of  equipment  or  a  system 
at  varying  simulated  load  levels  and  observing  the  perfor¬ 
mance.  This  is  good  for  identifying  potential  bottlenecks 
and  is  often  used  before  deploying  equipment. 

•  Multitier  modeling:  Using  capacity  planning  tools  to 
simultaneously  model  all  the  elements  of  a  multitier  appli¬ 
cation  and  predict  the  end-user  response  times. 

•  Multiworkload  modeling:  A  step  up  from  multitier, 
this  takes  into  account  the  fact  that  more  than  one  appli¬ 
cation  will  be  running  over  a  network  at  a  given  time. 

Note:  More  sophisticated  methods  that  allow  you  to 
model  multilayer  architectures  with  several  variables  are 
more  time-consuming,  and  the  tools  are  more  costly,  but 
they  deliver  better  results. 


Moffett  runs  reports  directly  out  of  the  ITRM  and 
does  some  regression  analysis  using  the  SAS  statistical 
procedures.  But  he  also  uses  other  tools  for  forecast¬ 
ing:  For  simpler  calculations,  he  imports  data  into  an 
Excel  spreadsheet,  and  he  uses  modeling  software 
from  HyPerformix  Inc.  to  simulate  server  capacity. 

Getting  the  performance  data  is  the  easy  part.  Get¬ 
ting  the  business  data  takes  a  bit  more  skill  because  it 
involves  coaxing  data  out  of  business  unit  executives 
rather  than  network  devices.  This  includes  business 
and  service  metrics,  as  well  as  expansion  plans. 

“The  process  of  obtaining  the  business  information 
is  the  biggest  challenge,”  says  Tom  Hill,  capacity  plan¬ 
ner  at  CNF  Inc.,  a  Palo  Alto,  Calif.-based  shipping  and 
supply  chain  management  company  that  uses  BMC 
Software  Inc.’s  Patrol  on  more  than  60  servers.  “At 
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resource  (test  environment) 

Application  and 
infrastructure 

Application  and 
infrastructure 

Prediction 

validity 

Response  time/ 
service-level 
prediction 

Limited  to  the 
existing  hardware 
configuration  only 

No 

Limited  to  the 
existing  hardware 

configuration  only 

•  ••••••••••• 

No 

Limited  to  the 
existing  hardware 

configuration  only 

•  ••••••••••• 

Yes,  but  limited 
to  tested 
infrastructure 

Existing  infrastruc¬ 
ture  and  projected 

future  infrastructure 

•  ••••••••••• 

Yes 

Existing  infrastruc¬ 
ture  and  projected 

future  infrastructure 

•  ••••••••••• 

Yes 

Accuracy  for 
p<  hiding  actual 
response  time 

Low 

Low 

Rough  estimate  of 
performance  in 
production 

High 

High 

if’  analysis 
£;  predictions 

No 

No 

Limited  to  varying 
load  levels 

Yes 

Yes 

some  point,  you  are  going  to  have  to  justify  your  exis¬ 
tence,  and  either  you  are  supporting  the  business  or 
you  are  not  going  to  be  around  much  longer.” 

Now  and  Forever 

Once  a  data  feed  is  arranged,  the  next  decision  is 
what  to  do  with  it.  That  requires  an  analysis  of  which 
resources  are  most  important  to  keep  running  at 
optimum  performance.  For  the  government  of  Vir¬ 
ginia’s  Fairfax  County,  the  key  element  is  the  IBM 
mainframe  running  its  custom  financial,  human  re¬ 
sources,  budgeting,  procurement  and  record-keeping 
applications.  Systems  programmer  Tom  Rose  uses 
Perfman  for  z/OS  from  The  Information  Systems 
Manager  Inc.  in  Bethlehem,  Pa.,  to  model  workloads 
on  the  mainframe’s  three  logical  partitions.  He  is  also 
using  it  to  determine  which  model  to  purchase  to  re¬ 
place  the  county’s  decade-old  machine.  Rose  is  con¬ 
sidering  an  IBM  eServer  zSeries  890  mainframe,  but 
there  are  27  models  to  pick  from,  and  he  doesn’t 
want  to  get  one  that’s  too  big  or  too  small. 

“We  are  using  taxpayer  money,  so  we  have  to  make 
sure  we  get  the  right  size  of  machine,”  says  Rose. 
“One  thing  we  have  noticed  is  that  we  can  purchase  a 
machine  with  more  processors,  but  certain  work¬ 
loads  won’t  be  any  faster.” 

CenturyTel  Inc.,  a  voice  and  data  services  provider 
in  Monroe,  La.,  with  more  than  3  million  customers 
in  22  states,  has  hundreds  of  servers  in  its  data  cen¬ 
ter.  But  it  uses  TeamQuest  Corp.’s  performance  man¬ 
agement  capacity  planning  software  on  only  about  20 
of  them.  “We  have  a  [Citrix  Systems]  MetaFrame 
with  hundreds  of  users,”  says  programmer  John  Bar- 
foot.  “We  have  so  much  fail-over  in  place  that  if  we 
lost  a  server,  it  is  not  a  big  deal.” 

The  servers  CenturyTel  does  model  are  Unix  box¬ 
es  running  its  data  warehouse  as  well  as  Amdocs  Ltd. 
Ensemble  customer  service  and  billing  software,  SAP 
ERP  applications  and  IBM  Tivoli  systems  manage¬ 
ment  software.  Barfoot  has  used  the  TeamQuest  soft¬ 
ware  to  cut  the  number  of  servers  SAP  was  running 
on  and  to  model  the  data  warehouse  to  help  the  com¬ 
pany  decide  whether  to  replace  the  server  or  simply 
upgrade  the  processors.  But  the  biggest  benefit  came 
when  CenturyTel  was  switching  from  a  legacy  billing 
system  to  Ensemble.  Hundreds  of  thousands  of  cus¬ 
tomers  were  being  migrated  at  a  time,  so  Barfoot 
kept  a  close  watch  for  potential  problems. 

“I  modeled  one  of  the  servers  and  saw  that  a  very 
significant  bottleneck  had  fallen  off  the  radar,”  says 
Barfoot.  “We  were  able  to  get  that  corrected  the  day 
before  the  conversion,  and  one  director  commented 
that  TeamQuest  paid  for  itself  in  that  one  instance.” 

Cases  like  this  give  capacity  planning  greater  cred¬ 
ibility.  No,  these  tools  won’t  catch  everything.  But, 
like  weather  predictions,  they’re  getting  more  accu¬ 
rate  and  reliable.  Weather.com  will  give  a  far  better 
prediction  of  tomorrow’s  precipitation  than  The  Old 
Farmer’s  Almanac,  and  capacity-modeling  tools  give 
a  better  prediction  than  linear  trending.  They  won’t 
eliminate  the  need  for  keeping  an  umbrella  in  the  car 
or  some  overhead  in  your  server  CPUs,  but  they 
greatly  lessen  the  chance  of  getting  caught  in  an  un¬ 
expected  rain  or  packet  flood.  ©  56194 


Robb  is  a  Computerworld  contributing  writer  in 
Los  Angeles.  Contact  him  at  drewrobb@attbi.com. 
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"...  SNW,  more  than  other 
conferences,  brings  together 
all  the  right  vendors  and  all 
the  right  users  ...” 


Andre  Mendes 
Chief  Technology 
Integration  Officer,  Public 
Broadcasting  Service 


"...  the  premier  event  in  the 
storage  industry  ...” 


Frank  Enfanto 
Vice  President, 

Operations  Delivery  & 
Information  Security, 

Blue  Cross  Blue  Shield  of 
Massachusetts 
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Learn  How  to  Achieve 
Storage  Networking  Success 

•  Get  a  Contemporary  Overview  of  Today's  Storage  Networking  Issues  and 
Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  in  Storage  Networking 
Technologies 

•  Hear  the  Latest  in  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 

Why  You  Should  Attend 

Are  you  responsible  for  managing  your  company’s  data  center  assets?  Want  to 
exchange  innovative  ideas  and  strategies  with  other  executives  who  share  the  same 
objectives?  Then  attend  Storage  Networking  World,  where  you'll  network  with  and 
learn  from  renowned  experts  and  the  nation's  top  user  executives. 

What  You’ll  Learn 

In  this  executive-forum  setting,  you’ll  hear  directly  from  executives  and  managers  in 
user  companies.  They’ll  address  a  wide  variety  of  today’s  burning  issues  like: 

•  CTO  Insights 

•  Enterprise  Business  Applications 
and  Databases 

•  Critical  and  Emerging  Technology 
Topics 

•  High  Bandwidth  Storage 
Applications 

•  Small  Medium  Business 
Considerations 


•  Selecting  and  Deploying  Storage 
Networks 

•  Data  Center  and  Infrastructure 
Considerations 

•  Storage  Security 

•  Managing  Storage  Networking 
Solutions 

•  Managing  Deployments  of  Existing 
and  Emerging  Technologies 

•  Deploying  Storage  to  Meet  Industry 


See  SNW’s  Interoperability  &  Solutions  Demo 

No  other  storage  event  gives  you: 

•40-plus  SNIA  member  companies  collaborating  on 
integrated  solutions 

•the  opportunity  to  meet  leading  experts  and  engineers 


=  IDC  storage  Analyst  Briefing 

In  this  fast-paced  session,  I  DC’s  top  storage  analysts  will 
examine  companies’  growing  interest  in  deploying  tiered 
storage  solutions  and  assess  its  impact  on  storage  compo¬ 
nents,  systems,  networks,  management  and  services. 
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For  more  information  and  to  register,  visit  www.snwusa.com/cw  or  call  1  -800-883-9090 


For  more  information  and  to  register,  visit  www.snwusa.com/cw  or  call  1  -800-883-9090 


Conference  At-a-Glance  (subject  to  change) 

For  details,  updates,  and  to  register  visit  www.snwusa.com/cw 


MONDAY,  OCTOBER  24 


Registration  Open  8:00am  -  8:30pm 


9:30am  -  1  1 :30am 
1 1 :30am  -  1 :00pm 
1 2:00pm  -  5:00pm 
1 :00pm  -  5:00pm 
1 :00pm  -  5:25pm 
4:40pm  -  6:30pm 
5:00pm  -  7:00pm 

7:00pm  -  9:00pm 


Primer  and  Tutorial  Tracks 
Luncheon 

Pre-Conference  Golf  Outing 
IDC  Analyst  Briefing 
SNIA  Technical  Tutorials 
End  User  Town  Hall  Meeting 

Speed  Dating  with  IDC: 

A  Channel  Partner  Networking  Event  at  SNW 
Welcome  Reception 


TUESDAY,  OCTOBER  25 


Registration  Open  7:00am  -  8:00pm 


7:00am  -  8:00am 
8:00am  -  1 2:30pm 
1 2:45pm  -  2:00pm 
2:1 0pm  -  5:40pm 

5:40pm  -  8:40pm 


Breakfast 

General  Conference  Sessions 
Luncheon 

Concurrent  Sessions  (IT  End-User  Case  Studies,  SNIA  Technical 
Tutorials,  Deployable  Solutions  Tracks) 

Expo  with  Dinner  and  Interoperability  &  Solutions  Demo 


WEDNESDAY, 

7:1 5am  -  8:1  5am 
8:30am  -  1  2:1 5pm 
1 2:1 5pm  -  2:00pm 
1 2:1 5pm  -  7:1 5pm 
2:1 0pm  -  5:40pm 

4:00pm  -  7:00pm 
7:00pm  -  9:30pm 


OCTOBER  26_ Registration  Open  7:00am  -  7:30pm 

Breakfast 

General  Conference  Sessions 
Expo  with  Luncheon 
Interoperability  &  Solutions  Demo 

Concurrent  Sessions  (IT  End-User  Case  Studies,  SNIA  Technical 
Tutorials,  Deployable  Solutions  Tracks) 

Expo  Open 

Gala  Evening  with  Dinner  and  Entertainment 


THURSDAY,  OCTOBER  27 _ Registration  Open  7:30am  -  10:30am 

7:30am  -  8:30am  Breakfast 

8:30am  -  1 2:00pm  Concurrent  Sessions  (IT  End-User  Case  Studies,  SNIA  Technical 
Tutorials,  Deployable  Solutions  Tracks) 

12:00pm  Conference  Concludes 


“...  the  greatest  thing  about 
being  at  SNW  is  the  ability 
to  network  with  peers  ..." 


Sasan  Hamidi 
CSO, 

Interval  International 


“...  SNW  is  so  concentrated 
that  it  gives  you  a  good  view 
of  the  overall  industry  ...” 


w  - 


Jeff  Pelot 

CTO,  Denver  Health  and 
Medical  Center 


^  SNIA 

Attend  SNIA-Certified 
Training  Programs  at  SNW 

Visit  www.snwusa.com  for  more 
information. 


The  Ritz-Carlton 
Golf  Club 

Orlando,  Florida 


JW  Marriott 
Grande  Lakes  Resort 

Orlando,  Florida 


Pre-Conference  Golf  Outing 


Hotel  Reservations  and  Travel  Services 


Complimentary  for  Registered  IT  End-Users 

The  Pre-Conference  Golf  Outing  at  The  Ritz-Carlton  Golf  Club  located 
adjacent  to  the  JW  Marriott  Grande  Lakes  Resort,  is  complimentary 
($125  value)  for  registered  IT  End-Users  (other  participants,  including 
sponsors  and  vendors,  may  play  on  an  “as  available"  basis  and  are 
responsible  for  all  applicable  golf  outing  expenses). 

For  details  contact  Chris  Johnson  at  1-508-820-8652 


Global  Odysseys  is  the  official  travel  company 
for  Storage  Networking  World.  They  are  your 
one-stop  shop  for  exclusive  discounted  rates  on 
hotel  accommodations. 

To  reserve  your  accommodations,  visit:  WWW.etcentral.com 
You  can  also  call  our  conference  housing  line  at:  1-888-254-1597 


Olotml  OdysseyH 
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Application  for  Conference  Registration 


Fax  this  completed  application  to  1-508-820-8254  or  apply  online  at:  www.snwusa.com/cw 


Your  business  card  is 
REQUIRED 

to  process  your  application 

Please  affix  your  business  card  to  this  space  prior  to 
submitting  your  application.  Applications  submitted 
without  business  cards  will  not  be  processed. 


Questions?  Call  1-800-883-9090 


.A;'" 


If  not  indicated  on  your  business  card, 
please  provide  the  following  required 
information: 


Corporate  Email  Address 


Corporate  Website 

Registration  questions? 

Call  1  -800-883-9090  or  email 
snwreg@computerworld.com 

Need  accommodations? 

Reserve  them  at:  www.etcentral.com 

Or  call  1-888-254-1597 
or  email:  eventhousing@globalodysseys.com 


Please  check  ONE  of  the  following: 

Earlybird  Registration  (through  September  12,  2005) 

Full/Onsite  Registration  (after  September  12,  2005) 

1  \  1  am  an  IT  End-User* 

(Complete  Attendee  Profile  below) 

□  $1,290  General  Conference  Package 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready”  Courses) 

□  $1,690  General  Conference  Package 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 

*  IT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially  buy/lease  hardware/software/sen/ices,  etc.  from  our  conference  sponsors  and  are  not  themselves  an  IT  vendor.  As  such, 
account  representatives,  business  development  personnel,  analysts,  consultants  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within  their  organization  are  excluded  from  the  “IT  End-User"  designation.  Interpretation  and  enforcement  of 
this  policy  are  at  the  sole  discretion  of  Computerworld. 


Attendee  Profile:  This  section  MUST  be  completed  by  IT  End-Users  and  Channel  Partners/Integrators/Consultants  only  (optional  for  all  other  registrations)  in  order  to  process  your  application. 


Your  Business/Industry 

□  Aerospace 

□  Manufacturing  &  Process  Industries  (non-computer  related) 

□  Finance/Banking/Accounting 

□  Insurance/Real  Estate/Legal  Sevices 

□  Government:  Federal  (including  Military) 

□  Government:  State  or  Local 

□  Health/Medical/Dental  Services 

□  Retailer/Wholesaler/Distributor  (non-computer  related) 

□  Transportation/Utilities 

□  Communication  Carriers 

(ISP,  Telecom,  Data  Comm,  TV/Cable) 

□  Construction/Architecture/Engineering 

□  Data  Processing  Services 

□  Education 

□  Agriculture/Forestry/Fisheries 

□  Mining/Oil/Gas 

□  Travel/Hospitality/Recreation/Entertainment 

□  Publishing/Broadcast/ Advertising/ 

Public  Relations/Marketing 

□  Research/Development  Lab 

□  Business  Services/Consultant  (non-computer  related) 

□  Manufacturing  of  Computers,  Communications, 

Peripheral  Equipment  or  Software 

□  I  am  a  Channel  Partner/ 
Integrator/Consultant 

(Complete  Attendee  Profile  above) 


Your  Job  Title/ Function: 

IT  MANAGEMENT 

□  CIO,  CTO,  CSO 

□  Executive  VP,  Senior  VP 

□  Vice  President 

□  Director 

□  Manager/Other  IT  Manager 

□  Supervisor 

BUSINESS  MANAGEMENT 

□  CEO,  COO,  Chairman,  President 

□  CFO,  Controller,  Treasurer 

□  Executive  VP,  Senior  VP,  VP,  General  Manager 

□  Director,  Manager 

□  Other  Corporate/Business  Manager 

Number  of  employees  in  your  entire  organization 
(ALL  locations) 

□  20,000  or  more 

□  10,000-  19,999 

□  5,000  -  9,999 

□  1,000-4,999 

□  500  -  999 

□  100-499 

□  50  -  99 

□  Less  than  50 


What  is  your  organization’s  annual  IT/IS  budget 
for  al!  IT/IS  products? 

□  $1  Billion  or  more 

□  $500  Million  -  $999,9  Million 

□  $100  Million  -  $499.9  Million 

□  $50  Million  -  $99.9  Million 

□  $10  Million  -  $49.9  Million 

□  $1  Million  -  $9.9  Million 

□  $500,000  -  $999,999 

□  $250,000  -  $499,999 

□  $100,000 -$249,999 

□  Less  than  $100,000 

What  is  the  estimated  annual  revenue  of 
your  entire  organization? 

□  Over  $10  Billion 

□  $1  Billion  -  $9.9  Billion 

□  $500  Million  -  $999.  Million 

□  $100  Million  -  $499  Million 

□  Less  than  $100  Million 


What  is  the  one  item  that  best  describes  your 
involvement  in  the  IT  purchase  process? 

□  Authorize/approve  purchase 

□  Evaluate/recommend  products,  brands,  vendors 

□  Specify  features/technical  requirements 

□  Set  budget  for  expenditures 

□  Determine  need  to  purchase 

□  Create  IT  strategy 

□  All  of  the  above 

Would  you  like  to  receive  information  about  playing  in 
the  golf  outing  on  Monday,  October  24th? 

□  Yes 

□  No 

Do  you  need  hotel  accomodations? 

□  Yes  (please  visit  www.etcentral.com  to  reserve) 

□  No 

Would  you  like  to  receive  a  complimentary 
subscription  to  Computerworld? 

□  i  already  subscribe 

□  Yes 

□  No 


Signature  Date 


□  $3,000  General  Conference  Package 
(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


□  $3,500  General  Conference  Package 
(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


By  participating  in  SNWs  Channel  Partner/Integrator/Consultant  registration  package,  registrants  may  enjoy  the  following  benefits:  One  company  representative  may  receive  a  full  conference  pass  to  SNW  Fall  2005;  additional  com¬ 
pany  representatives  (maximum  of  two)  may  register  by  paying  the  prevailing  rate  for  full  conference  passes  similar  to  a  Sponsor/Exhibiting  company  per  below.  Company  may  invite  up  to  five  IT  User  customers  to  attend  SNW 
Fall  (IT  Users  must  be  strictly  compliant  with  IT  User  definition  on  the  supplied  registration  form);  companies  registering  for  this  package  interested  in  joining  the  SNIA  are  eligible  to  receive  a  $2,000  discount,  provided  that  membership  is 
applied  for  prior  to  January  1 ,  2006. 


]  My  company  is  Sponsoring/ 
Exhibiting  at  SNW 


□  $1,290  General  Conference  Package 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 


□  $1,690  General  Conference  Package 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 
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DEFINITION 

A  protocol  is  a  set  of  formal  rules  that  describe  how 
devices  or  software  can  exchange  information  with  one 
another  across  a  computer  or  communications  network. 


BY  RUSSELL  KAY 

IN  CLASSICAL  GREEK,  the 
word  protocollon  (literally, 
“first  leaf”)  referred  to  the 
first  sheet  of  paper  or 
papyrus  in  a  scroll,  which  was 
actually  glued  to  the  wooden 
scroll  itself.  By  custom,  this 
sheet  was  used  to  describe  the 
contents  of  the  entire  scroll. 

When  books  replaced  _ 

scrolls,  the  protocollon 
continued  as  a  table 
of  contents  page  glued 
into  the  front  of 

the  book.  _ 

For  a  long  time,  the 
word  protocol  was  used  pri¬ 
marily  to  refer  to  the  etiquette 
of  diplomacy  and  formal 
arrangements  of  affairs  of 
state  —  seating  arrangements, 
how  to  address  dignitaries  and 
so  on.  Later,  the  term  became 
a  name  for  a  type  of  treaty  or 
international  agreement.  Per¬ 


haps  the  best  known  of  those 
in  recent  memory  are  the 
Montreal  and  Kyoto  protocols, 
which  are  environmental 
agreements  on  greenhouse 
gases  and  global  warming. 

But  information  technology 
has  co-opted  the  term,  as  it 
has  so  many  others,  giving  it 
new  meaning  in  an  entirely 

-  different  context.  As 

first  applied  to  tech¬ 
nology  in  the  1950s, 
protocols  were  rules 
governing  communica¬ 
tion  between  electron¬ 
ic  devices  such  as  ra¬ 
dios  and  telephones. 

As  electronic  communica¬ 
tion  grew  and  computers 
came  into  widespread  use, 
computing  protocols  were 
created  to  control  the  design 
of  and  interaction  among  vari¬ 
ous  types  of  networks. 

IT  protocols  today  describe 


any  set  of  rules  that  allow  dif¬ 
ferent  machines  or  pieces  of 
software  to  coordinate  with 
one  another  unambiguously. 
The  use  of  communication 
and  computing  protocols  re¬ 
quires  a  common  message  for¬ 
mat  and  an  accepted  set  of 
commands  that  all  parties  to  a 
communications  exchange 
will  understand.  Thus  proto¬ 
cols  ensure  that  electronic 
communication  transactions 
follow  predictable,  logical 
sequences. 

Ethernet’s  Value 

A  protocol  is  an  agreed-upon 
set  of  rules  typically  used  by 
network  designers  and  devel¬ 
opers  to  resolve  a  particular 
communications  challenge.  A 
protocol  must  be  generally  ac¬ 
cepted  as  an  industry  standard 
before  it  can  be  widely  used.  A 
protocol  becomes  a  standard 


when  a  standards  develop¬ 
ment  organization  or  other  re¬ 
spected  group  recognizes  and 
codifies  it. 

For  example,  Ethernet  is  a 
LAN  protocol  that  forms  the 
underlying  transport  vehicle 
used  by  several  upper-level 
communication  protocols,  in¬ 
cluding  TCP/IP.  Originally 
developed  by  Xerox  Corp., 
Digital  Equipment  Corp.  and 
Intel  Corp.,  Ethernet  has  since 
become  a  formal  standard, 
accepted  by  the  Institute  of 
Electrical  and  Electronic  Engi¬ 
neers  Inc.  as  IEEE  802.3. 

A  frame-based  net¬ 
working  technology, 

Ethernet  defines 
wiring  and  signaling 
for  the  physical  layer 
as  well  as  data  packet 
formats  and  protocols 
for  the  data  link  layer 
as  described  in  the  In¬ 
ternational  Standards 
Organization’s  seven-layer 
Open  Systems  Interconnec¬ 
tion  reference  model  (see  dia¬ 
gram  below).  Ethernet  speci¬ 
fies  how  data  is  broken  up  into 
discrete  packets,  how  the  net¬ 
work  will  be  accessed  and 
how  the  data  is  to  be  transmit¬ 
ted.  The  protocol  also  speci¬ 
fies  how  it  will  interact  with 
both  higher-  and  lower-level 
protocols. 

Just  as  standards  build  upon 
one  another,  most  protocols 
depend  on  other,  related  pro¬ 
tocols  to  work  properly  in  a 
broader  context.  This  arrange¬ 


ment  is  often  called  a  hierar¬ 
chical  protocol  stack. 

For  example,  low-level  pro¬ 
tocols  such  as  Ethernet  define 
electrical  and  physical  stan¬ 
dards,  the  order  in  which  bits 
and  bytes  are  interpreted  and 
the  transmission  and  error- 
detection/correction  systems 
used  in  the  bit  stream. 

Higher-level  protocols  deal 
with  the  way  data  is  format¬ 
ted,  including  the  syntax  of 
messages,  dialogues  between 
terminals  and  host  computers, 
which  character  sets  are  used, 
how  messages  are  properly 

sequenced  and  more. 
The  complete  proto¬ 
col  stack  supports 
applications  such  as 
Web  browsing  or 
end-to-end  telephone 
calls  between  voice- 
over-IP  telephones. 

Today,  the  Inter¬ 
net,  the  Web  and  oth¬ 
er  private  and  public  networks 
simply  couldn’t  function  with¬ 
out  the  existence  and  accep¬ 
tance  of  scores  of  specific  pro¬ 
tocols.  O  56406 


Kay  is  a  Computerworld  con¬ 
tributing  writer  in  Worcester, 
Mass.  You  can  reach  him  at 
russkay@charter.net. 


Are  there  technologies  or  issues  you'd  like 
to  learn  about  in  QuickStudy?  Send  your 
ideas  to  quickstudy@computerworld.com 

To  find  a  complete  archive  of  our 
QuickStudies,  go  online  to 
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Protocols.com  offers  a 
comprehensive  listing 
of  data  communica¬ 
tions  protocols,  their 
functions,  structures, 
and  various  errors  and 
parameters. 


The  Internet  Protocol  Stack 


Protocols  are  designed  to  be  both  functionally 
self-contained  and  to  interact  with  a  variety  of 
higher-  and  lower-level  protocols.  Perhaps  the 
best  known  is  the  Internet  Protocol  stack.  Each 
protocol  specifies  both  its  own  role  and  how 
interactions  are  to  take  place  with  related 
protocols  above  and  below  it,  from  the  physical 
cabling  up  through  the  application  layer.  The 
work  of  defining  protocols  is  often  conducted 
within  standards  groups  such  as  the  IEEE  and 
the  World  Wide  Web  Consortium. 

Although  the  IP  stack  shown  on  the  right  is 
monolithic,  in  practice  the  protocols  used  at  each 


level  are  modular  and  can  be  swapped  out. 

For  example,  the  Session  Initiation  Protocol  is 
a  fundamental  application-layer  building  block 
for  a  VoIP  stack.  SIP  can  establish,  modify  or 
terminate  multimedia  sessions  or  Internet 
telephone  calls  and  invite  participants  to  unicast 
or  multicast  sessions.  SIP  works  with  client 
requests  and  server  responses  that  can  be  sent 
through  TCP.  Or  another  transport  protocol  can 
be  used,  such  as  the  User  Datagram  Protocol.  At 
the  data  link  layer,  VoIP  phones  could  run  over 
Ethernet  or,  increasingly,  Wi-Fi. 

-Russell  Kay 


HTTP,  Session  Initiation 
Protocol  and  others 


Transmission  Controi 
Protocol 


Internet  Protocol 
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Peers  Say  Cisco  Ended  Up 
Wearing  the  Black  Hat 


After  the  IOS  vulnerability  brouhaha,  our 
security  manager  gets  a  feel  for  what  her 
peers  think  of  the  situation.  By  C.  J.  Kelly 


Every  year,  I  dream 

about  going  to  the  Black 
Hat  USA  briefings  in 
Las  Vegas.  I  haven’t 
been  able  to  attend  yet,  but 
I  have  a  good  friend  and  col¬ 
league  named  Bob  who  has 
attended  on  his  own  dime  and 
with  his  own  vacation  time  the 
past  few  years. 

After  every  conference,  he 
goes  back  to  work  and  applies 
his  new  knowledge  to  better 

securing  the  environ-  - 

ment.  Finally,  his  boss 
saw  the  value  in  send¬ 
ing  him,  and  this  year, 
the  company  paid  for 
him  to  attend  the 
event. 

Unfortunately,  up¬ 
per  management  in  a  lot  of 
companies  is  still  reluctant  to 
send  security  engineers  to  one 
of  the  world’s  most  useful  se¬ 
curity  conferences.  They  need 
to  get  over  that.  The  feds  have 
wised  up,  and  they  now  recruit 
security  people  at  the  confer¬ 
ence.  What  does  that  tell  you? 
It  tells  me  that  some  of  the 
brightest  and  best  security 
people  hang  out  at  Black  Hat. 

Getting  the  Scoop 

When  it  comes  to  Black  Hat,  I 
live  vicariously  through  Bob. 
He  provides  me  with  materials 
from  the  conference  each  year 
and  shares  what  he  learns.  As 
soon  as  he  returned  from  last 
month’s  conference,  I  pinged 
him  via  e-mail  and  asked  him 
if  his  name  had  been  on  the 
Wall  of  Sheep.  That’s  a  giant 
screen  in  the  conference  hotel 
that  scrolls  the  names  and  par¬ 
tial  passwords  of  attendees 
foolish  enough  to  access  the 
Internet  through  the  hotel’s 
unsecured  wireless  system. 

Of  course  it  wasn’t,  because 
he’s  a  security  engineer. 


SECURITY 

MANAGER’S 

JOURNALfi 


This  year’s  event  was  more 
newsworthy  than  most  be¬ 
cause  of  the  flap  that  resulted 
when  Michael  Lynn  gave  his 
talk  about  the  Cisco  IOS  vul¬ 
nerability  [QuickLink  55863], 
Bob  sent  me  the  presentation 
materials  from  Lynn’s  talk,  and 
I  forwarded  them  to  security 
colleagues  and  asked  what 
they  thought  of  the  whole 
brouhaha.  My  take  is  that  Lynn 
lost  his  job  at  Internet  Secu- 

-  rity  Systems  Inc. 

because  Cisco  had  a 
nervous  breakdown 
and  ISS  didn’t  back 
up  its  guy.  What  a 
shame. 

One  of  my  col¬ 
leagues,  a  Cisco  Cer¬ 
tified  Internetwork  Expert 
who  goes  way  back,  wondered 
why  Cisco  would  get  so  upset; 
after  all,  Microsoft  gets  bat¬ 
tered  for  vulnerabilities  on  a 
daily  basis.  What  he  said  next 
was  superb:  “It  sounds  to  me 
like  Cisco  perceives  itself  as 
occupying  a  firmament  above 
and  beyond  the  mortal  IT 
world,  since  theirs  is  a  dedi¬ 
cated  OS  and  not  a  flawed,  gen¬ 
eral-purpose  OS.  I  think  they 
need  to  take  a  Valium  and  just 
mellow  out!”  I  was  surprised 
at  the  response,  given  his  top- 
level  Cisco  certification. 

Another  friend,  who  at  one 
time  was  the  director  of  emer¬ 
gency  preparedness  at  a  major 


Not  a  single  colleague 
I  spoke  with  approved 
of  how  Cisco  handled 
the  situation. 


telecom  company,  had  a  similar 
opinion:  “This  was  not  Chick¬ 
en  Little;  it  was  a  warning  — 
the  smoke  alarm  in  advance  of 
a  fire. ...  It  was  a  way  to  keep 
the  bad  guys  at  bay  for  just  a 
little  bit  longer.”  He  also  was  of 
the  opinion  that  “bad  guys  will 
always  attempt  to  exploit  vul¬ 
nerabilities.  This  reminds  me 
of  the  emperor’s  new  clothes 
—  everyone  knew  there  were 
some  vulnerabilities  with  Cis¬ 
co;  they  just  had  an  unspoken 
pact  not  to  openly  communi¬ 
cate  those  vulnerabilities. 
Somebody  decided  this  was  an 
issue  that  demanded  attention 
and  decided  to  be  responsible.” 

I  had  thought  that  someone 
who  was  responsible  for  a 
global  network  would  have 
been  completely  panicked  by 
the  disclosure.  Not  so. 

Disclosure  Debate 

Bob’s  comments  about  Lynn’s 
choice  to  disclose  the  vulnera¬ 
bility  were  very  interesting. 

I  could  see  his  angst  over 
the  whole  issue  of  when  and 
where  it’s  appropriate  to  dis¬ 
close  vulnerabilities  that 
could  have  a  global  impact. 

“If  your  security  depends 
on  secrecy,  you’ve  got  no  secu¬ 
rity,”  he  said.  “Secrets  get 
leaked,  or  get  discovered  by 
independent  research.  If  Mike 
Lynn  could  find  it,  so  could  a 
black  hat  in  Pakistan  with  al- 
Qaeda  sympathies.  Would  that 
person  have  warned  everyone 
equally?  Or  would  they  have 
disseminated  the  information 
differently?  Mike  Lynn  needed 
to  disclose  what  he  found,  and 
I  think  he  did  it  properly. 

“I  don’t  know  if  I’d  call 
Michael  Lynn  a  hero,”  he  con¬ 
tinued.  “He’s  certainly  gutsy,  a 
man  of  his  convictions,  willing 
to  make  sacrifices  to  do  what 
he  feels  is  right.  He’s  talented 
in  his  code  analysis.  I’d  hire 
him  in  an  instant  if  I  had  an 
opening  that  fit  his  skills  and 
talents.  And  I’m  grateful  for 


what  he  has  done.  Yes,  he 
opened  a  can  of  worms,  but  he 
did  it  in  broad  daylight,  in 
front  of  thousands  of  people, 
rather  than  in  a  dark  corner 
where  only  a  select  few  could 
capitalize. 

“It’s  a  tightrope,”  Bob  ex¬ 
plained.  “What  one  researcher 
discovers,  another  can  as  well. 
Criminal  hackers  are  not  dum¬ 
mies;  many  of  them  are  highly 
skilled  and  adept  at  finding 
and  exploiting  the  chinks  in 
the  armor.  There  have  been 
cases  of  white-hat  researchers 
disclosing  vulnerabilities  and 
releasing  proof-of-concept 
exploit  code  after  getting  no 
(or  negative)  response  from  a 
vendor,  or  after  waiting  for  a 
patch  to  be  released  for  sever¬ 
al  months.  I  prefer  to  think 
that  these  researchers  are  act¬ 
ing  in  the  hopes  of  spurring 
the  vendor  to  act  (rather  than 
simply  grabbing  the  glory  of 
finding  the  vulnerability). 

But  they  are  also  providing  a 
road  map  to  the  criminal  hack¬ 
ers,  who  know  that  no  mitiga¬ 
tion  is  available  for  a  particu¬ 
lar  vulnerability.  Is  this  ap¬ 
propriate?  Well,  there’s  your 
tightrope,  and  I  don’t  see  a  net 
anyplace.” 

Yes,  Bob  tends  to  be  long- 
winded,  and  I  wish  I  could 
share  all  of  his  comments.  But 
it’s  striking  that  not  a  single 
colleague  I  spoke  with  ap¬ 
proved  of  how  Cisco  handled 
the  situation.  One  person  sug¬ 
gested  that  Cisco  should  have 
handed  out  CDs  with  the  IOS 
patch  to  all  attendees  at  the 
conference.  Now,  that  was  a 
great  idea!  I 

WHAT  DO  YOU  THINK? 

This  week’s  journal  is  written  by  a  real 
security  manager,  “C.J.  Kelly,"  whose 
name  and  employer  have  been  disguised 
for  obvious  reasons.  Contact  her  at 
mscjkelly@yahoo.com,  or  join  the  dis¬ 
cussion  in  our  forum:  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager's  Journals,  go  online  to 

©  computerworld.com/secjournal 
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Webroot  Unveils 
Spy  Sweeper  2.5 

Webroot  Software  Inc.  has 
released  a  new  version  of  its 
enterprise  antispyware  soft¬ 
ware.  Spy  Sweeper  2.5  in¬ 
cludes  improved  spyware- 
removal  features  and  per¬ 
forms  disk  sweeps  up  to  10 
times  faster  than  the  previous 
version,  said  Webroot.  Pricing 
starts  at  S29.95  per  user,  ac¬ 
cording  to  the  Boulder,  Colo.- 
based  vendor. 

McAfee  Adds  Tiger 
Support  for  Virex 

McAfee  Inc.  announced  that 
Virex  for  Macintosh  now  sup¬ 
ports  the  Mac  OS  X  Tiger  oper¬ 
ating  system.  Designed  for 
corporate  users,  Virex  7.7 
works  with  ePolicy  Orchestra- 
tor,  McAfee's  central  manage¬ 
ment  software.  It  begins  ship¬ 
ping  today,  according  to  the 
security  software  vendor. 

SurfControl  Filter 
Targets  Citrix 

SurfControl  Inc.  last  week  an¬ 
nounced  the  availability  of  a 
Web  filtering  tool  designed  for 
Citrix  Systems  Inc.’s  Presen¬ 
tation  Server  3.0  and  4.0  en¬ 
vironments.  SurfControl  Web 
Filter  features  a  reporting  and 
analysis  function  to  help  com¬ 
panies  monitor  Web  access 
and  implement  rules  for  ac¬ 
cess  control  and  performance 
enhancement,  according  to 
the  Scotts  Valley,  Calif. -based 
vendor  of  security  products. 


Panda  Offers 
VPN  Protection 

Glendale,  Calif.-based  Panda 
Software  Inc.  last  week  rolled 
out  software  to  help  protect 
against  hacker  break-ins 
via  virtual  private  network 
connections.  VPNSecure  is 
designed  to  ensure  that  re¬ 
mote  computers  attempting  to 
access  a  corporate  network 
via  a  VPN  comply  with  pre¬ 
scribed  security  policies  relat¬ 
ing  to  antivirus  updates  and 
firewalls.  Pricing  starts  at 
$42.31  per  seat,  with  a  25- 
user  minimum. 
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Asset  Management 
Software  Upgraded 

Exor  Corp.  in  Bristol,  England,  has 
announced  the  3.2.1  release  of  its 
asset  management  software.  The 
release  features  enhancements 
for  enterprisewide  consolidation 
of  asset  registers  and  work  prac¬ 
tices,  the  company  said.  Version 
3.2.1  offers  an  interface  between 
Exor  and  the  Oracle  E-Business 
Suite,  as  well  as  the  ability  to 
model  off-network  and  external 
assets.  Pricing  was  not  available. 


SAS  Enhances 
Enterprise  Miner 

SAS  Institute  Inc.  has  announced 
plans  to  enhance  its  data-  and 
text-mining  software.  Enterprise 
Miner  5.2  includes  new  visualiza¬ 
tion  and  enhanced  Web-mining 
features.  Text  Miner  adds  the  abil¬ 
ity  to  analyze  documents  in  PDF, 
HTML  and  other  formats.  Both 
products  will  ship  in  October. 


Nexsan  Announces 
Storage  Appliance 

Nexsan  Technologies  Inc.  has  an¬ 
nounced  Assureon,  its  first  secure 
content-addressable  storage  ap¬ 
pliance.  The  device  serves  as  a 
write-once,  read-many  storage 
system.  Based  on  ATA  disk  tech¬ 
nology,  the  Assureon  supports 
up  to  168TB  of  capacity.  Pricing 
starts  at  $12,500  per  terabyte. 


WebLogic  Gains 
BPEL  Support 

BEA  Systems  Inc.  announced  that 
BEA  WebLogic  Integration  8.5  in¬ 
cludes  support  for  the  Business 
Process  Execution  Language  1.1 
standard.  The  tool  includes  en¬ 
hanced  process  management  and 
data-transformation  features  de¬ 
signed  to  boost  performance. 
Users  can  develop  business 
processes  in  WebLogic  Integra¬ 
tion  and  export  them  as  BPEL 
processes  or  import  BPEL  proc¬ 
esses  developed  in  other  tools. 
WebLogic  Integration  8.5  is 
priced  at  $62,000  per  CPU. 


DOUGLAS  SCHWEITZER 


The  ‘Virtual’  Way  to 
Better  Wireless  Security 


’VE  ALWAYS  FOUND  the  vernacular  used  in 
computing  very  interesting.  For  example,  there’s 
the  term  virtual.  In  computing,  what  is  called  vir¬ 
tual  does  not  physically  exist  but  has  been  made 
to  appear  to  exist  by  some  software  processes. 


My  first  experience  with 
this  term  was  in  connection 
with  the  use  of  virtual  mem¬ 
ory.  When  an  operating  sys¬ 
tem  runs  out  of  real  (physi¬ 
cal)  memory,  it  begins  to 
swap  chunks  of  data  from 
physical  memory  chips  to 
the  hard  disk  in  order  to 
make  room  for  more  data. 

The  use  of  virtual  tech¬ 
nology  certainly  doesn’t 
stop  with  memory,  however. 

Enter  the  virtual  LAN,  or 
VLAN.  A  VLAN  acts  like  an 
ordinary  LAN,  but  connected  devices 
don’t  have  to  be  physically  connected 
to  the  same  segment.  In  other  words, 
a  VLAN  appears  to  be  one  large  net¬ 
work  created  from  a  collection  of  mul¬ 
tiple  networks.  Today,  many  organiza¬ 
tions  use  VLAN  technology  to  create 
expanded  LANs  comprising  hundreds 
of  host  machines  spanning  multiple 
geographic  locations.  Essentially,  a 
VLAN  allows  you  to  divide  your  net¬ 
work  into  segments,  creating  multiple 
discrete  networks  within  one  physical 
network  and  allowing  traffic  to  be  fil¬ 
tered  between  them.  Often,  an  organi¬ 
zation  creates  separate  VLANs  for 
different  departments  or  divisions, 
with  each  serving  as  a  boundary  and 
improving  performance  by  isolating 
certain  network  traffic. 

While  handy  for  segmenting  Ether¬ 
net  networks,  VLANs  can  also  be 
used  as  a  security  tool  for  wireless 
networks.  Wireless  users  are  at  their 
greatest  risk  when  in  hot-spot  environ¬ 
ments.  For  security  purposes,  VLANs 
are  often  used  to  segregate  wireless 


traffic  from  other  network 
traffic.  Say,  for  example, 
you’d  like  to  provide  wire¬ 
less  connectivity  in  your 
cafeteria  or  some  publicly 
accessible  areas  of  your 
organization.  For  general 
Internet  access,  it  would 
be  wise  to  put  that  wire¬ 
less  network  onto  an  un¬ 
trusted  VLAN  that  con¬ 
nects  only  to  the  outside 
world  and  not  to  your 
internal  network.  If  inter¬ 
nal  network  access  is  re¬ 
quired,  it  should  still  go  on  a  separate 
VLAN  yet  have  its  own  firewall  con¬ 
nection  to  the  rest  of  the  network.  In 
addition,  you  can  prohibit  users  from 
joining  the  VLAN  network  by  restrict¬ 
ing  individual  access  or  any  unwanted 
intrusion  into  a  network. 

As  you  can  see,  VLANs  have  the 
ability  to  provide  additional  security 
not  available  in  a  traditional  LAN  envi¬ 
ronment.  And  while  the  proper  use  of 
VLANs  alone  can  improve  wireless  se¬ 
curity,  you  may  still  wish  to  employ 
additional  security  measures  —  such 
as  a  public-key  infrastucture  —  to 
keep  sensitive  data  from  prying  eyes. 

With  all  their  benefits,  VLANs  are, 
as  you  would  expect,  sometimes  more 
costly  to  implement  than  traditional 
LANs.  VLANs  are  essentially  WANs 
and  often  need  to  support  geographi¬ 
cally  dispersed  locations  and  extra  se¬ 
curity;  as  a  result,  they  can  increase 
overhead.  Basically,  they’re  a  little  more 
complex  to  configure  than  connecting 
computers  together  in  the  same  build¬ 
ing  like  with  an  ordinary  LAN. 


DOUGLAS  SCHWEITZER  is  a 

freelance  writer  and  In¬ 
ternet  security  specialist 
in  Nesconset,  N.Y.  He 
can  be  reached  at 

dougneak@juno.com. 


Configuration  of  the  VLAN  may  be 
either  static  or  dynamic.  For  height¬ 
ened  security,  the  static  configuration 
is  the  best  and  therefore  most  popular 
option  in  today’s  networks.  Static 
VLAN  configurations  assign  member¬ 
ship  to  only  one  port  on  the  switch 
rather  than  to  the  media  access  control 
(MAC)  address  of  whatever  device  is 
connected  to  the  port. 

Less  secure  (and  less  popular)  are 
the  dynamic  VLANs,  where  VLAN 
membership  is  assigned  to  the  MAC 
address  of  the  device  or  host.  In  short, 
when  a  port  that’s  configured  to  sup¬ 
port  a  VLAN  connects  with  a  host,  the 
switch  will  determine  which  VLAN 
that  specific  MAC  address  is  part  of 
and  will  then  assign  the  appropriate 
VLAN  to  the  host. 

While  static  configurations  are  the 
better  option  for  VLAN  security,  re¬ 
member  that  they  nevertheless  remain 
inadequate  for  providing  absolute  se¬ 
curity.  They  do  provide  a  safeguard 
against  offhand  attempts  at  viewing 
your  network  traffic,  but  VLANs  have 
their  own  security  shortcomings,  such 
as  VLAN  “hopping.”  In  hopping,  net¬ 
work  security  is  jeopardized  when  a 
packet  sent  from  a  VLAN  is  intercept¬ 
ed  or  rerouted  to  another  VLAN. 

Experienced  hackers  can  exploit 
these  vulnerabilities  to  sniff  data  and 
determine  passwords  and  other  criti¬ 
cal  data  at  the  Layer  2  switch  level 
where  VLANs  operate.  Because 
switches  weren’t  originally  devised  to 
perform  as  firewalls  or  routers,  they’re 
inherently  vulnerable  to  such  attacks. 
Fortunately,  the  new  breed  of  smart 
switches  currently  available  is  helping 
to  put  an  end  to  this  deficiency  and 
reinforces  the  value  of  VLANs  as  a 
wireless  security  strategy.  O  56408 
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No  Strings  Attached 

Rent-A-Center’s  flexible, 
wireless  hiring  kiosks  have 
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further  automation,  says 
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INSTANT  MESSAGING  has  fought 
the  battle  for  business  turf  and 
won.  The  use  of  IM  in  the  corpo¬ 
rate  sector  has  reached  main¬ 
stream  status,  and  it’s  a  welcome 
productivity  boost. 

“Before  IM,  we  had  too  many 
salespeople  who  had  to  get  up  and 
go  meet  face  to  face  because  some¬ 
one  couldn’t  be  reached.  And  with 
e-mail,  you  have  a  latency  issue,  so 
employees  would  get  up  and  go  talk 
to  each  other,”  says  Josh  Stallings, 


vice  president  of  strategic  initia¬ 
tives  at  No  Red  Tape  Mortgage  in 
Sherman  Oaks,  Calif. 

“Now  our  people  are  on  the 
phone  all  day  because  they  can 
[simultaneously]  IM  our  process¬ 
ing  team  to  get  the  information 
they  need  for  our  clients,”  he  says. 

IM  is  a  real-time  text  communi¬ 
cations  technology  with  which 
messages  can  be  sent,  received  and 
viewed  immediately.  And  it’s  nearly 
everywhere,  says  Paul  Ritter,  re- 
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search  director  for  messaging  and  col¬ 
laboration  at  Wainhouse  Research,  a 
communications  market  research  firm 
in  Duxbury,  Mass.  “Our  research 
shows  that  more  than  80%  of  large 
companies  in  the  U.S.  have  some  form 
of  IM,”  he  says. 

But  IM  is  risky  and  could  cause  as 
much  damage  as  rogue  e-mail,  says  S.V. 
Purushothaman,  program  leader  of  the 
conferencing  and  collaboration  group 
at  Frost  &  Sullivan  Ltd.,  a  high-tech 
consultancy  in  New  York.  “Today,  10% 
of  global  IM  messages  are  spim,”  or  IM 
spam,  says  Purushothaman.  “It  has  the 
same  potential  as  e-mail  spam.” 

Moreover,  hackers  are  finding  it 
easier  to  break  in  through  IM  buddy 
lists  than  by  other  means,  he  says. 

While  some  companies  have  out¬ 
lawed  IM  because  of  security  concerns 
[QuickLink  56025],  many  are  looking 
for  ways  to  mitigate  risks  while  enjoy¬ 
ing  the  business  benefits.  Here  are 
steps  you  can  take  to  secure  IM  in  your 
organization. 

MANAGE  UNAUTHORIZED  EM 
CLIENTS.  This  applies  to  anything 
that’s  added  to  IT  assets  and  infra¬ 
structure,  says  David  MacLeod,  direc¬ 
tor  of  information  protection  and 
assurance  at  The  Regence  Group,  a 
health  insurance  carrier  in  Portland, 
Ore.  “We  have  a  very  well-defined, 
-controlled  and  -monitored  electronic 
perimeter,”  he  says.  “We  know  what 
can  leave  our  organization  and  what 
can  come  in.  That  is  clearly  the  first 
and  most  important  step  when  you 
want  to  introduce  anything  new  onto 
the  network.” 

ADDRESS  RISKS  THAT  ARISE 
FROM  CHANGE.  Simply  adding 
IM  to  the  network,  like  adding  any 
software,  introduces  risk.  “It’s  not  be¬ 
cause  it  happens  to  be  IM.  Anytime 
we  add  something  new  to  our  environ¬ 
ment,  there  are  security  and  privacy 
considerations,”  says  MacLeod.  “You 
need  to  determine  whether  it  has 
altered  the  security  posture  of  the 
organization.” 

IDENTIFY  AND  VERIFY  USERS 
TO  CURTAIL  UNAUTHORIZED 

ACCESS.  This  is  what’s  referred  to 
as  authenticating  the  user.  CIO  Tim 
Hudson  at  Man  Financial,  the  broker¬ 
age  arm  of  London-based  Man  Group 
PLC,  accomplishes  this  by  tying  the 
party’s  identity  and  permissions  for 
various  types  of  uses  to  existing  tech¬ 
nologies  that  identify  people  who  have 


access  rights  on  the  network.  “If  some¬ 
one  has  logged  onto  IM,  we  know  that 
she  or  he  is  that  person,”  says  Hudson. 

ESTABLISH  APPROPRIATE- 
USE  POLICIES.  “If  you  have  an  IM 
product  you  want  to  use,  you  need  to 
do  due  diligence  and  have  proper  poli¬ 
cies  in  place,”  says  Frost  &  Sullivan’s 
Purushothaman.  Policies  may  include 
rules  such  as  not  allowing  users  to 
send  files  via  IM,  because  sending  and 
receiving  attachments  makes  it  easy  to 
spread  viruses,  he  says. 

Or  you  may  not  want  different 
workgroups  to  IM  one  another.  “We 
have  separate  user  groups  and  don’t 
necessarily  allow  them  to  IM  each  oth¬ 
er.  This  ensures  that  research,  sales, 
and  institutional  and  product  client 
groups  are  appropriately  connected  or 
disconnected,”  says  Hudson.  The  same 
technologies  that  identify  users  can 
identify  the  workgroups  they  belong 
to  with  their  individual  IM  privileges, 
he  says. 

EDUCATE  EMPLOYEES  ABOUT 
IM  USE  AND  POLICIES.  Employ¬ 
ees  play  an  important  role  in  IM  secu¬ 
rity.  “Educate  your  users  that  they 
shouldn’t  be  sharing  passwords  and 
that  if  they  are,  they’re  handing  over 
their  identity  to  their  colleague,”  says 
Hudson. 

At  The  Regence  Group,  people  man¬ 
agement  is  key  to  securing  IM.  “We 
have  clearly  articulated  our  policies 
around  what  kinds  of  information 
should  be  shared,  what  kinds  should  be 
protected  and  what  are  appropriate 
mechanisms  for  sharing  information,” 
says  MacLeod. 

ENFORCE  POLICIES.  “We  have 
tools  that  automatically  apprise  us 
when  it  appears  that  something  against 
policy  has  occurred, ’’says  MacLeod. 
“We  work  with  human  resources  and 
our  leadership  team  to  make  sure  that 
the  employees  involved  understand 
why  that’s  not  appropriate  and  to 
coach  them  on  how  to  do  that  kind  of 
information  exchange  in  a  more  secure 
and  appropriate  manner.” 

Purushothaman  takes  a  harder  line 
against  IM  misuse.  He  suggests  issuing 
one  or  two  warnings  and  then  proba¬ 
tion  for  offending  employees. 

MONITOR  RISKS  RELATED  TO 
SECURITY  AND  PRIVACY  LEG¬ 
ISLATION.  Many  companies  using 
IM  are  subject  to  multiple  privacy  and 
security  regulations,  such  as  the  Health 


Insurance  Portability  and  Accountabil¬ 
ity  Act  and  the  Sarbanes-Oxley  Act. 

The  compliance  concern  is  that 
information  that  should  be  secured  can 
be  passed  on  quickly  and  easily  to  nu¬ 
merous  parties  in  the  public  domain, 
CIOs  say. 

Therefore,  in  industries  such  as  fi¬ 
nancial  services,  pharmaceuticals  and 
health  care,  IM  conversations  must  be 
archived  and  logged.  There  also  need 
to  be  policies  to  prevent  any  damaging 
information  from  getting  out,  says 
Purushothaman. 

MANAGE  IM  PATCHES.  Take  the 
same  care  with  IM  patches  that  you  do 
with  any  other  software.  “We  evaluate 
all  IM  patches  to  determine  if  they  ad¬ 
dress  something  that  is  at  risk  for  our 
organization,  and  if  they  do,  they  are 
prioritized  and  applied  as  quickly  as 


MANAGED  PUBLIC  INSTANT  MESSAGING, 

which  uses  gateways  to  and  from  public 
systems,  lets  companies  communicate  be¬ 
yond  their  walls  to  a  vast  world  of  cus¬ 
tomers,  partners  and  contacts  using  what¬ 
ever  IM  software  they  want. 

The  benefits  of  being  able  to  reach 
everyone  instantly  are  pushing  companies 
to  find  secure  managed  public  IM  products 
and  driving  vendors  to  provide  them,  says 
S.V.  Purushothaman, 
program  leader  of 
the  conferencing 
and  collaboration 
group  at  Frost  & 

Sullivan. 

IM  vendors  such 
as  Microsoft  Corp. 
and  IBM,  which  sell 
server  software  to 
companies  that 
want  to  run  their 
own  IM  systems, 
are  striking  deals 
with  public  net¬ 
works  like  Ameri¬ 
can  Online  Inc.’s  IM 
network,  says  Paul 
Ritter,  research  di¬ 
rector  for  messaging  and 
collaboration  at  Wainhouse  Research.  At 
the  same  time,  managed  public  IM  ven¬ 
dors,  including  IMLogic  Inc.,  FaceTime 
Communications  Inc.  and  Akonix  Systems 
Inc.,  are  selling  gateways  designed  to  se¬ 
curely  regulate  traffic  between  public  and 
internal  IM  networks,  Purushothaman  says. 

The  managed  public  IM  vendors  are  also 
developing  environments  called  federated 


appropriate,”  says  MacLeod. 

IF  YOU  SEND  INSTANT  MES¬ 
SAGES  OUTSIDE  THE  COM¬ 
PANY,  RECOGNIZE  THE 
UNIQUE  RISKS  ASSOCIATED 
WITH  THAT.  “If  a  CIO  believes  she 
or  he  needs  to  IM  outside  the  compa¬ 
ny,  that  introduces  an  entirely  different 
set  of  concerns,”  MacLeod  says.  “You 
require  a  different  set  of  controls,  and 
it  should  be  segregated  from  the  inter¬ 
nal  messaging  capabilities.” 

Additional  authentication  measures 
might  be  necessary  to  adequately  iden¬ 
tify  who  is  sending  instant  messages 
from  outside  the  company,  Hudson 
adds.  ©  56144 


Geer  is  a  freelance  writer  in 
Ashtabula,  Ohio.  Contact  him 
atgeercom@alltel.net. 


clearinghouses  that  enable  users  with 
public  IM  user  IDs  to  send  and  receive  in¬ 
stant  messages  securely,  he  adds. 

These  clearinghouses  mitigate  the  risks 
of  intercompany  IM  because  they  don’t  in¬ 
clude  the  millions  of  users  on  public  IM,  Pu¬ 
rushothaman  explains.  “You  might  have  ac¬ 
cess  by  invitation,”  he  says.  “If  you  are  a 
preferred  partner,  for  example,  a  company 
could  choose  to  provide  you  access  to  its 
internal  IM  network. 
The  access  won’t 
be  provided  to  the 
entire  workforce  of 
the  partner.  It  could 
be  limited  to  10  to 
20  users.” 

At  No  Red  Tape 
Mortgage,  busi¬ 
ness-class  IM  is 
provided  on  a  se¬ 
cure,  external  net¬ 
work,  says  Josh 
Stallings,  vice  presi¬ 
dent  of  strategic  ini¬ 
tiatives. 

The  company 
selected  an  external 
IM  service  to  segre¬ 
gate  IM  from  the  compa¬ 
ny  network.  “We  chose  this  model  to  re¬ 
move  IM  from  a  position  of  access  to 
other  applications  on  our  network,”  says 
Stallings.  This  isolates  IM  from  the  compa¬ 
ny’s  internal  applications  and  network  for 
security  reasons.  It  also  keeps  IM  from 
using  up  the  bandwidth  reserved  for  those 
other  applications,  Stallings  says. 

-David  Geer 
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Big  ideas  aren’t  just  for  big  businesses.  And  running  a  hair  salon  isn’t  quite  the  same  as  running  a  global  aerospace 
corporation.  That’s  why  SAP  makes  solutions  that  are  sized  for  small  businesses.  With  our  years  of  experience,  and 
qualified  partners,  we’re  able  to  pinpoint  the  right  solution  for  your  needs  and  then  implement  it  quickly  -  and 
affordably.  At  SAP,  we  know  business  fundamentals,  and  we  know  what  makes  each  business  fundamentally  different. 

Visit  sap.com/unique  to  see  how  we  can  help  your  business. 
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PAY  MORE  ATTENTION  TO  SERVERS 
BEFORE  YOU  BUY  THEM. 

SO  YOU  CAN  PAY  LESS  ATTENTION 


Affordable,  reliable,  easy  to 


manage:  eServer  xSeries  with  Intel®  Xeon™  Processors 
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IBM  eServer  BladeCenter  HS20  Express 


An  entry-level  server  that  offers 
the  reliability  and  performance 
needed  for  business-critical 
computing.  Easy  set  up,  deploy¬ 
ment,  and  access  to  all  major 
system  components. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3GHz/2MB 
Two-way  tower  with 
rack  capability 
Up  to  7  hot-swappable 
SCSI  hard  disk  drives 
Two  73GB  HS  SCSI  HDD 
standard 

Limited  warranty:  up  to  3 
years  on-site3 

From  $1,639*4 

(Other  configurations  as  low  as  $1,229') 

IBM  Financing  Advantage 

Only  $45  per  month7 


Help  maximize  performance 
and  improve  availability  in  a 
rack  dense  environment  with 
Xtended  Design  Architecture:” 
Includes  features  like  Calibrated 
Vectored  Cooling,  an  IBM  inno¬ 
vation  that  helps  to  cool  your 
system  and  improve  uptime. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3GHz/2MB 
Two-way  2U  rack  server  _ 

Up  to  2GB  DDR2  memory 
using  8  DIMM  slots  with 
enhanced  memory 
Limited  warranty:  up  to  3 
years  on-site3 

From  $3f999*4 

(Other  configurations  as  low  as  $2,219J) 

IBM  Financing  Advantage 

Only  $109  per  month5 


With  the  power  of  3rd  generation 
Enterprise  X-Architecturej"  it  sets  qq 
a  new  standard  for  4-socket, 

64-bit  servers.  Delivers  increased 
performance,  systems  manage¬ 
ability,  and  simultaneous  support 
for  32  and  64-bit  apps. 

System  features 

Up  to  four  64-bit  Intel  Xeon 
Processors  MP  3.66GHz 
64GB  DDR  memory 
4GB  memory  expandable 
to  64GB 

Six  64-bit  Active  PCI-X  2.0 
IBM  Director 

Calibrated  Vectored  Cooling 
Limited  warranty:  up  to  3  years 
on-site3 

From  $13,779*4 

(Other  configurations  as  low  as  $6,999") 

IBM  Financing  Advantage 
Only  $379  per  month5 


Designed  to  support  the  Intel 
Xeon  Processor  and  packed 
with  high-availability  features, 
the  eServer  BladeCenter 
HS20  with  an  industry-leading 
modular  design  delivers  density 
without  sacrificing  processor 
performance. 

System  features 

Up  to  two  Intel  Xeon 

Processors  3.20GHz/2MB 
Up  to  14  blades  per  chassis 
Supports  both  32 

and  64-bit  applications 
IBM  Director 

Limited  warranty:  up  to  3  years 
on-site3 

From  $2,979*4 

(Other  configurations  as  low  as  $1,839") 

IBM  Financing  Advantage 

Only  $82  per  month5 


IBM  TotalStorage® 


Simplify  storage  management  to  help  improve  productivity 


IBM  TotalStorage  DS300  Express 

System  features 

Entry-level,  cost-effective  SCSI  storage  systems 
designed  to  deliver  advanced  functionality  at  a 

3U  rack-mount  entry  level 

Support  for  up  to  14 

Starts  at  584GB  / 

Scales  to  4.2TB 

breakthrough  price.  Provides  an  exceptional 
solution  for  work  group  storage  applications, 
such  as  e-mail,  file,  print,  database  and  Intel 

Xeon  Processor-based  servers. 

Ultra320  SCSI  disk  drives 

Limited  warranty:  1  year 
on-site3 

From  $5,355* 

IBM  Financing  Advantage 

(Other  configurations  as  low  as  $2,995) 

Only  $147  per  month5 

‘All  prices  are  IBM’s  estimated  retail  selling  prices  that  were  correct  as  of  June  3, 2005.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products 
are  subject  to  availability.  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  1.  IBM  Director  is 
not  available  on  TotalStorage  products.  2.  IBM  Director  must  be  installed.  Products  included  in  IBM  Express  Servers  and  Storage  may  also  be  purchased  separately.  3.  Telephone  support  may  be  subject  to 
additional  charges.  For  on-site  labor,  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  4.  Prices  subject  to  change  without  notice.  Price  may  not  include  a  hard  drive, 
operating  system  or  other  features.  Contact  your  IBM  representative  or  IBM  Business  Partner  for  the  most  current  pricing  in  your  geography.  5.  IBM  Global  Financing  terms  and  conditions  and  other  restrictions 


TO  THEM  AFTER. 


With  IBM®  Express  Servers  and  Storage™  offerings 
designed  for  mid-sized  businesses,  help  is  here. 

You’ve  already  got  a  zillion  things  that  require  your 
attention -you  shouldn’t  have  to  worry  about  your  systems. 
That’s  why  IBM  Express  products  offer  reliability  features, 
which  help  them  do  their  job  so  you  can  focus  on  yours. 

Take  IBM  Director,  which  comes  standard.1  It  can  pro¬ 
actively  notify  you  of  a  potential  problem -up  to  48  hours 
in  advance.  Or  our  Calibrated  Vectored  Cooling  feature 
available  on  select  xSeries  systems.  It  can  cool  your  system 
more  efficiently.  This  means  more  features  can  be 
packed  into  a  smaller  server -for  more  functionality  and 
greater  flexibility. 

It’s  just  an  example  of  our  self-managing  features  that  help 
you  take  back  control  of  your  IT.  Which  can  help  lower 
your  maintenance  costs,  too.  Because  with  IBM  Express 
Servers  and  Storage,  innovation  comes  standard.  It’s 
not  optional.  Plain  and  simple,  it’s  built  in.2 

There’s  also  one  more  great  feature-your  IBM  Business 
Partner.  Which  means  you  can  have  a  one-to-one  chat 
with  someone  who  understands  your  industry  and  your 
business-and  who’s  located  in  your  neck  of  the  woods. 
And  for  mid-sized  businesses,  that’s  really  big  help  in  a 
really  big  way. 


B  THE  WORLD’S  HELPDESK 


LecKfir*  more  ^bout-  our  -full 
r cKr\  of  of  XBm  Express 
products  arid 
options.  And  "find  the  X&m 
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who  car\  help  you.  choose  the 
fight-  system  to  meet-  your 
requirements. 


ibm.com/eserver/helpisherel 

1-800-IBM-7777 
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SIZE  OF  BUSINESS 


HELP  FOR  ANY  SIZE  PROBLEM 


IBM  TotalStorage  DS400  Express 

With  advanced  functionality,  the  DS400  provides 
an  exceptional  solution  for  work  group  storage 
applications.  It  supports  Intel  Xeon  Processor- 
based  servers  and  offers  Fibre  Channel  drives 
designed  for  high  performance,  and  hot-swap 
Ultra320  SCSI  drives  designed  for  high  reliability. 


System  features 

2GB  Fibre  Channel  storage  Starts  at  584GB  /  Scales  to  12TB 

systems  area  network  (SAN)  Limited  warranty:  1  yegr  on_site3 

3U  rack-mount  entry  level 


From  $8,495*  IBM  Financing  Advantage 

(Other  configurations  as  low  as  $4,995)  Only  $234  per  month' 


may  apply.  Monthly  payment  provided  is  for  planning  purposes  only  and  may  vary  based  on  customer  credit  and  other  factors.  Rates  and  offerings  are  subject  to  chanoes  extension  nr  withdrawal  without  nntir*  irm 
eServer,  BladeCenier,  xSeries.  TotalStorage.  IBM  Express  Servers  and  Storage,  Enterprise  X-Architecture  and  Xtended  Design  Architecture  are  trademarks  or  reaistered  tradema^V^nterna^al  R 
Corporation  in  the  United  States  and/or  other  countries.  Intel,  Intel  Inside  the  Intel  Inside  logo,  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  states 
and  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©  2005  IBM  Corporation.  All  rights  reserved.  M  6  u  ea  es 
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Rent-A-Center’s 
wireless  hiring 
kiosks  are  a 
model  of  effi¬ 
cient  in-store 
automation  and 
a  catalyst  for 
more.  By  Gary 
H.  Anthes 


IF  A  SINGLE  WORD  Could  Sum 
up  the  system  development 
approach  at  Rent-A-Center 
Inc.,  it  would  have  to  be  flexi¬ 
bility.  Flexibility  in  project 
management.  Flexibility  in 
technical  architecture.  Flexi¬ 
bility  in  application  design. 

Those  three  ingredients  came  to¬ 
gether  recently  when  the  $2.3  billion, 
Plano,  Texas-based  chain  of  merchan¬ 
dise  rental  stores  overhauled  its  hu¬ 
man  resources  system  and  put  wireless 
hiring  kiosks  and  thin  clients  into 
nearly  3,000  sites  across  the  U.S., 
Canada  and  Puerto  Rico. 

The  system,  which  process¬ 
es  10,000  applications  and 
1,000  new  hires  a  month,  cost 
$3.9  million  and  is  saving  Rent- 
A-Center  $2.3  million  a  year, 
the  company  says.  It  also  has 
freed  store  managers  from 
hours  of  paperwork  each 
week,  boosted  the  quality  of 
new  hires  while  decreasing 
employee  turnover  and  laid 
the  foundation  for  further  in¬ 
store  automation.  “This  has  been  a 
huge  success  for  the  company,”  says 
Tony  Fuller,  IT  vice  president  and 
chief  technology  officer  and  a  2005 
Computerworld  Premier  100  IT  Leader. 

Before  2004,  a  job  applicant  walking 
into  a  Rent-A-Center  store  had  to  Fill 
out  a  paper  application,  and  the  store 
manager  would  hold  it  until  he  had  an 
opening.  Neither  the  home-office  HR 
department  nor  a  nearby  store  with  an 
immediate  opening  would  know  any¬ 
thing  about  the  candidate.  Moreover, 


the  store  manager  was  forced  to  be¬ 
come  a  part-time  HR  specialist,  some¬ 
thing  he  may  have  had  neither  the  time 
nor  the  temperament  for. 

Now,  that  same  applicant  sits  down  at 
an  in-store  kiosk,  reads  about  Rent-A- 
Center  on  the  company’s  Web  site  and 
then  fills  out  a  job  application  online. 

The  completed  application  is  transmit¬ 
ted  wirelessly  to  the  store’s  network  and 
from  there  to  corporate  HR  via  the 
company’s  virtual  private  network. 

The  application  is  processed  and 
screened  by  recruiting  specialists  using 
the  Webhire  Recruiter  hosted  service 
from  Webhire  Inc.  in  Lexington,  Mass. 

When  a  store  manager  no¬ 
tifies  the  home  office  of  an 
opening,  within  24  to  48 
hours  he’ll  get  the  resumes  of 
at  least  five  prequalified  ap¬ 
plicants  to  choose  from,  ac¬ 
cording  to  Jennifer  Wisdom, 
HR  vice  president.  “A  senior 
VP  estimated  for  me  that  his 
[regional]  market  managers 
were  spending  20%  to  25%  of 
their  time  in  recruiting,”  she 
says,  “and  now  it’s  about  5%.” 

Tammy  Walker,  who  manages  a 
Rent-A-Center  store  in  Orange  City, 
Fla.,  agrees.  “We  are  getting  better 
people  now,  and  it  has  reduced  our 
turnover,”  she  says. 

Walker  says  every  applicant,  quali¬ 
fied  or  not,  used  to  cost  her  two  hours 
of  paperwork.  Now  the  paper  is  gone 
and  most  of  that  labor  takes  place  in 
the  corporate  HR  department. 

Rent-A-Center  stores  change  their 
merchandise  and  floor  layouts  continu¬ 
ally,  says  K.C.  Condit,  director  of  tech¬ 
nical  infrastructure,  and  that’s  one  rea¬ 
son  the  company  insisted  on  wireless 
kiosks.  The  little  cubicles  —  which  are 
fitted  with  a  diskless,  book-size  thin 
client,  a  display,  a  mouse,  a  keyboard 
and  a  chair  —  can  be  moved  easily,  and 
the  company  saves  the  cost  of  wiring 
and  rewiring  3,000  stores. 

“This  was  a  lead-in  to  more  things 
down  the  road,”  Fuller  says  of  the  proj¬ 
ect.  “The  kiosks  were  the  catalyst  that 
allowed  us  to  do  the  infrastructure, 
and  we  have  piggybacked  a  lot  of 
things  onto  that.” 

With  the  network  infrastructure  in 


READY,  SET,  GO! 

“One  of  the  biggest  challenges  - 
aside  from  ’Here’s  technology  we  have 
never  used  and  let’s  make  it  work’  - 
was  we  did  the  entire  project  in  five 

-  says  K.C.  Condit,  director  of 
technical  infrastructure  at  Rent-A-Center. 

When  you  work  that  fast,  you  team 
things  that  not  every  IT  manager  knows.  For 
example,  it's  not  easy  to  buy  3.000  chairs 
all  at  the  same  time.  But  that's  what  the 
company  had  to  do  to  deploy  its  kiosk- 
based  employment  application  system  with¬ 
in  that  condensed  time  frame, 

“We  pushed  some  vendors  to  the  limit,  to 
put  it  mildly,’’  recalls  CTO  Tony  Fuller. 

Indeed,  a  gaggle  of  furniture,  computer 
hardware  and  software  vendors  had  to  run 
to  keep  up  with  a  project  schedule  shaped 
by  a  company  with  a  flat  organizational 
chart  and  an  informal  management  style. 

“We  take  pride  in  having  a  very  small 
management  staff  in,  our  home  office,  and 
we  have  very  open  lines  of  communica¬ 
tions,”  Fuller  says.  “From  when  we  decide 
to  do  something  to  implementation  has  al¬ 
ways  been  a  short  time.  We  like  to  get  in 
and  get  if  done.” 

Fuller  explains  that  for  a  project  of  this 


fate,  we  have  the  ability  to  get  all  the 
iht  people  into  the  room  all  talking  the 
me  language.  And  we  get  the1  vendors 
o  the  loop  from  Day  One  also.” 

-  Gary  H.  An 


place  and  the  thin-client  and  wireless 
technologies  proven,  Rent-A-Center 
ordered  9,000  more  wireless-enabled 
thin  clients  to  support  additional  in¬ 
store  applications.  Account  manage¬ 
ment,  which  had  been  a  laborious, 
paper-based  function,  has  been  auto¬ 
mated,  and  a  training  program  based 
on  books  and  videotapes  was  turned 
into  a  Web-based  program  managed  by 
the  home  office.  Store  personnel  can 
use  the  thin  clients  for  e-mail  and  ac¬ 
cess  to  the  company  intranet  as  well. 

And  each  store  can  serve  as  a  “virtu¬ 
al  office”  for  regional  mangers,  who 
are  on  the  road  visiting  stores  four 
days  a  week,  Fuller  says.  “Now  that  we 
have  proved  that  wireless  works  in  the 
stores,  we  can  deploy  things  on  de¬ 
mand  fairly  quickly,”  he  says. 

Adds  Condit,  “We  program  the  de¬ 
vice,  ship  it  to  the  store,  and  all  they 
have  to  do  is  plug  it  in  and  turn  it  on  — 
from  out  of  the  box  to  on  the  network 
in  10  minutes,  without  having  to  call 
tech  support.”  056146 


“This  has  been  a 
huge  success”  for 
Rent-A-Center,  says 
. 
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WHO’S 
WHO  IT 


Shawn  Mahoney  guides  business 
customers  to  the  right  information 
and  helps  them  reel  it  in. 


SHAWN  MAHONEY 

Title:  Systems  and  programming 
manager 

Employer:  Foremost  Insurance 
Co.,  part  of  the  Farmers  Insur¬ 
ance  Group  in  Caledonia,  Mich. 

Years  in  IT:  10 

Years  in  current  specialty:  Four 


What’s  the  most  important  contribution  you 
make,  and  how  do  you  make  it?  We  have 
two  responsibilities  here,  data  ware¬ 
housing  and  back-end  reporting  — 
business  and  management  reporting. 
We  manage  and  define  data  for  report¬ 
ing.  That’s  incredibly  important  to  the 
organization.  We  work  very  diligently 
to  provide  meaningful  reporting  for 
the  business.  That  includes  regulatory 
reporting.  We  support  finance,  claims 
and  certain  areas  of  product,  actuary 
and  underwriting.  Most  of  the  business 
looks  to  us  for  special  reports. 

What  is  the  most  important  IT  skill  or  apti¬ 
tude  you  need  to  do  your  job?  If  you  want 
to  be  successful  in  IT,  you  can’t  be  just 
a  specialist  anymore.  You  have  to  have 
a  blend  of  skills  to  be  effective.  You 
need  a  little  programming  background, 
but  as  a  manager,  I  can’t  be  just  the 
fastest  coder;  I  try  not  to  code.  But  I 
need  to  understand  the  effort  it  takes 
to  get  useful  information  out  of  the  box. 
I  also  need  a  strong  familiarity  with 
the  data  and  why  and  how  the  business 
uses  the  data  and  how  it’s  defined. 

What  is  the  most  important  “soft”  skill  you 
need  to  do  your  job?  I  have  10  direct  re¬ 
ports,  and  I  have  to  have  really  good 
people  skills  to  harness  their  energies, 
get  them  focused  on  a  particular  agen¬ 
da,  lead  them  through  tough  times  and 
get  quality  information  out  the  door.  If 
I  were  not  a  people-oriented  person,  I 
don’t  think  I  could  be  very  successful. 
Communication  plays  an  important  role 
here.  We  spend  an  awful  lot  of  time 
bridging  the  communications  gap  be¬ 
tween  business  people,  who  have  their 
own  acronyms  and  language,  and  the 
hard-core  applications-development 
side  of  the  business,  which  is  a  differ¬ 
ent  area.  When  the  business  has  needs, 
we  listen  intently  and  restate  them  in 
tech  terms  for  the  tech  counterparts. 
Everyone  has  to  be  in  tune  so  that 
transfer  can  take  place. 

What’s  the  biggest  misconception  about 

what  you  do?  I  think  the  time  it  takes  to 
do  things  is  the  biggest  misconception. 


Business  people  understand  that  what 
we  do  is  difficult,  but  they  say,  “It’s  sort 
of  like  this  other  job.”  They  don’t  real¬ 
ize  that  once  you  get  down  under  it, 
the  required  changes  take  more  time 
than  they  thought.  We  want  to  turn 
things  around  quickly,  but  there’s  a 
level  of  due  diligence.  We  want  to  be 
sure  we’ve  understood  correctly. 
Everybody’s  grappling  to  shrink  the 
time  to  develop  a  report,  but  the  level 
and  complexity  of  reporting  in  today’s 
environment  has  only  gotten  more 
complicated. 

What  do  you  like  best  about  your  job?  I  have 
a  great  team.  If  I  didn’t,  it  would  be 
very  frustrating.  And  I  have  very  sup¬ 
portive  management.  I’ve  been  allowed 
to  take  this  role  and  develop  it  and 
work  with  a  diverse  group  and  make  it 
all  work.  It’s  fun.  If  I  couldn’t  get  up  in 


the  morning  and  know  I’m  going  to 
have  fun,  I  wouldn’t  want  to  be  here. 

What  do  you  like  least?  The  volume  of 
regulatory  work  we  have  to  comply 
with.  It  just  seems  to  grow.  This  is  a 
highly  regulated  industry,  and  some  of 
it  gets  to  be  so  —  you  just  wonder  why 
they’re  asking  the  question.  I  don’t 
mind  doing  this,  but  I  would  like  to 
know  why,  other  than  that  the  state 
decided  to  report  this  way. 

What  should  other  IT  people  know  about 
your  role?  That  it’s  fun  to  be  a  manager. 
You  don’t  always  see  a  lot  of  people 
striving  to  take  on  management  roles 
in  IT,  but  it  can  be  fun  to  be  a  manager, 
as  long  as  you  find  ways  to  cut  that 
work  umbilical  cord  at  the  end  of  the 
day.  There’s  a  sense  of  satisfaction  that 
you  get.  Even  when  things  go  wrong, 


when  you  come  up  with  a  solution,  you 
derive  a  lot  of  satisfaction  from  that. 

It’s  a  challenge,  and  it’s  rewarding. 

What  should  business  people  know  about 
your  role?  That  for  this  to  be  a  success¬ 
ful  partnership,  they  need  to  invest  a 
lot  of  quality  time  and  not  just  turn 
something  over  to  IT.  It  takes  commit¬ 
ment  from  both  parties  to  be  success¬ 
ful.  You  need  a  business  partner 
[who’s]  not  only  willing  to  help  you 
build  a  requirements  document  but 
also  to  take  the  time  to  educate  the 
team  as  to  why  they  need  this  done  so 
everybody  buys  into  the  game.  There’s 
a  better  result  when  everybody  under¬ 
stands.  We  lose  that  if  we’re  just 
programming  out  of  a  set  of  specs  and 
have  no  clue  why  they  want  informa¬ 
tion  in  that  format.  We  need  the  busi¬ 
ness  people  to  be  here  throughout  the 
whole  process.  More  and  more,  we  see 
people  willing  to  do  that,  but  there  are 
still  a  few  we  need  to  convert. 

What  would  enable  you  to  do  your  job 
better?  More  resources  are  always  nice. 
Bigger,  faster,  more  people  is  certainly 
important.  All  of  IT  has  gone  through  a 
real  austerity  program  in  the  last  few 
years.  As  businesses  look  at  what  they 
need  to  do  to  be  competent  in  this  in¬ 
creasingly  global  marketplace,  they 
have  to  think  where  to  put  their  invest¬ 
ments.  Organizations  have  a  lot  of  in¬ 
formation,  and  you  can  do  a  lot  to  the 
data  that  makes  it  easy  to  ask  questions 
and  learn  something  about  the  busi¬ 
ness.  That  takes  time,  talent  and  in¬ 
vestment,  but  it  pays  dividends. 

If  you  weren’t  a  systems  and  programming 
manager,  what  would  you  be?  My  dream 
job  would  be  fishing  guide,  but  it  prob¬ 
ably  doesn’t  pay  very  well.  Helping 
people  get  at  something  by  putting 
them  in  touch  with  the  right  resources 
and  the  right  body  of  water  —  catching 
fish  and  catching  data  aren’t  all  that 
different. 

How  does  the  future  look  for  your  role?  I’m 

pretty  positive  and  excited  about  it. 
Because  through  back-end  reporting 
and  data  warehousing,  we’re  really  tied 
to  the  business  from  an  information 
perspective.  It’s  the  information  side  of 
information  technology  that’s  impor¬ 
tant.  Technology  is  going  to  change, 
and  that’s  exciting,  but  you  really  need 
to  remember  the  core  is  having  knowl¬ 
edge  about  the  data  and  keeping  it 
where  you  can  get  at  it  and  use  it. 
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Interview  by  Kathleen  Melymuka. 


HOW  MANY  PEOPLE  DOES 
TO  SUPPORT  A  SINGLE 

(THAT’S  TOO  MANY.) 


With  IBM®  Express  Servers  and  Storage™  designed  for 
mid-sized  businesses,  help  is  here. 


Servers  should  support  a  business,  not  the  other  way  around. 
That’s  why  IBM  Express  Servers  have  self-managing  features:  so 
that  our  servers  can  virtually  run  themselves.  What’s  more,  with 
IBM  Express  Servers  and  Storage,  innovation  comes  standard. 

Take  the  OpenPower™  710  Express,  for  instance.  It’s  specially  ^ 
tuned  for  Linux®  and  offers  the  reliability  of  POWER5™  technology  :T 

at  a  surprisingly  low  price.1  O 

CL 


Tuned  for  Linux 

IBM  eServer  OpenPower  710  Express 


System  features 


Increase  computing  power,  availability  and  scalability 
in  a  rack  dense  environment 


And  while  you  can’t  be  in  two  places  at  the  same  time,  you  might  C 
want  to  look  into  the  innovative  server  feature  that  can.  For  example,  T 
the  remarkable  Advanced  POWER™  Virtualization  option  -  it  lets  Q 
one  OpenPower  710  Express  act  as  many  virtual  ones. 

On  top  of  that  there’s  IBM  TotalStorage®  products,  which  offer  a  wide  > 
range  of  disk,  tape,  and  storage  software  solutions  -  so  you  can  qFj 
choose  the  right  options  to  meet  the  growing  needs  of  your  company.  0 

There’s  also  one  more  great  feature  -  your  IBM  Business  Partner,  -y 
Which  means  you  can  talk  to  someone  who  understands  your 
industry  and  your  business  -  and  who’s  located  in  your  neck  of  the 
woods.  And  for  mid-sized  businesses,  that’s  really  big  help  in  a 
really  big  way. 


Ideal  for  consolidation  of  infrastructure  workloads 
(Web  serving,  file,  print,  security  applications) 

Robust  64-bit  mainframe-inspired  POWER5  systems 
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help  simplify  your  data 
management  needs. 

System  features 

2GB  Fibre  Channel  SAN-ready 
3U  rack  mount  entry  level 
Scales  to  33.6TB 

Supports  up  to  112  Fibre  Channel 
disk  drives  -  with  optional 
EXP710  expansion  units6 

Heterogeneous  OS  support 

Limited  warranty:  3  years  on-site2 
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IS  FLAT 


man  notes.  For  instance,  he  points  to  a 
McDonald’s  restaurant  in  Cape  Girar¬ 
deau,  Mo.,  whose  drive-through  order- 
taker  is  located  900  miles  away  in  a 
Colorado  Springs  call  center.  The 
order-taker  is  connected  to  the  cus¬ 
tomers  and  the  workers  preparing  the 
food  via  high-speed  communications 
lines.  The  approach  has  helped  the 
franchisee  lower  its  costs,  speed  cus¬ 
tomers  through  and  make  fewer  mis¬ 
takes  in  handling  orders. 

At  times,  Friedman  comes  off  as  a 
cheerleader  for  the  flattened  world. 
Nevertheless,  the  book  is  compelling. 


NATIONAL  bestseller 


Mi 

T.  ▼  _JL.\ 


■  The  World  Is  Flat:  A  Brief  History  of  the 
Twenty-first  Century,  Thomas  L.  Friedman 

(Farrar,  Straus  &  Giroux,  488  pages, 
$27.50). 

'UCH  has  been  written  and 
said  about  the  latest  book 
from  the  Pulitzer  Prize- 
_  winner  and  New  York 
Times  foreign  affairs  columnist 
Thomas  Friedman.  Clayton  Jones  of 
The  Christian  Science  Monitor  called 
it  “an  idiot’s  guide  to  surviving  in  the 
computer  age,”  while  Warren  Bass  de¬ 
scribed  it  as  “an  enthralling  read”  in 
his  review  for  The  Washington  Post. 

I’d  say  the  book  falls  somewhere  in  be¬ 
tween.  To  Friedman’s  credit,  it’s  the 
most  comprehensive  description  I’ve 
seen  of  how  the  events  of  the  late  20th 
century  and  the  first  few  years  of  the 
new  millennium  have  helped  “flatten” 
our  world. 

Friedman’s  premise  is  simple:  The 
massive  investment  made  in  fiber¬ 
optic  technologies  during  the  heyday 
of  the  dot-com  era  has  made  it  possible 
for  companies  from  Shenzen,  China,  to 


Sofia,  Bulgaria,  to  compete  in  what  has 
truly  become  a  global  economy,  thus 
leading  to  a  “flatter”  world. 

Fie  supports  this  thesis  by  listing 
10  forces  that  have  helped  flatten  the 
world,  including  the  collapse  of  the 
Berlin  Wall,  India’s  shift  away  from  an 
insular  economy,  the  spread  of  PCs 
and  Windows  software,  and  the  open- 
source  software  movement. 

Some  of  what  Friedman  de-  _ 

tails  is  old  news:  how  U.S.  hos¬ 
pitals  can  transmit  CT  scans  via 
the  Internet  and  have  them  read 
by  Indian  or  Australian  radiolo¬ 
gists  overnight,  and  how  sprawl- 
ing  call  centers  in  India  operate  around 
the  clock  to  support  customers  of  big 
companies  such  as  Delta  Air  Lines  Inc. 
and  Microsoft  Corp. 

Friedman  argues  that  the  world  is 
now  entering  what  he  refers  to  as 
“Globalization  3.0.”  Globalization  1.0 
occurred  from  1492  to  1800,  after 
Columbus’  discovery  of  the  New 
World  helped  reveal  that  the  world 
could  be  circumnavigated,  thus  un¬ 
leashing  the  potential  for  global  trade. 
Globalization  2.0  occurred  from  1800 
to  roughly  2000,  when  multinational 
companies  ventured  overseas  for  new 
sources  of  labor  and  trade.  That  era 
was  driven  by  the  Industrial  Revolu¬ 
tion  and  resulting  technological  break¬ 
throughs  such  as  steamships,  trains, 
automobiles,  airplanes  and  telephones. 

Now  we’re  in  a  third  phase  of  global¬ 
ization,  says  Friedman,  when  software 
and  fiber-optic  technologies  have 
made  it  possible  for  people  to  conduct 
business  around  the  world.  And  while 
the  first  two  eras  of  globalization  were 
led  by  Westerners,  this  latest  period  is 
open  “to  every  color  of  the  human 
rainbow,”  writes  Friedman. 

But  the  flattening  of  the  world  isn’t 
just  about  offshore  outsourcing.  Fried- 
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■  The  Rules  of  Management:  A  Definitive 
Code  for  Managerial  Success,  Richard  Tem¬ 
plar  (Prentice  Hall,  209  pages,  $16.95). 
ot  everyone  enters  the 
workforce  hoping  to  one  day 
become  a  manager.  But  if 
you’re  a  creative  application 
developer,  an  effective  project  leader 
or  a  skilled  network  technician,  you’re 
likely  to  find  yourself  in  that  role  at 
some  point.  Suddenly,  you’re  thrust 
into  the  position  of  coaxing  the  most 
you  can  out  of  other  people,  acting  as  a 
buffer  between  senior  management 

_  and  your  staff,  setting  a  good 

example  and  making  sure  the 
job  gets  done  right. 

Unfortunately,  you’re  unlike¬ 
ly  to  receive  much  guidance 
from  your  boss  or  a  human  re¬ 
sources  manager  on  how  to  lead  a 
team  of  people  you  didn’t  pick. 

The  book’s  title  is  an  apt  description 
of  its  contents:  It’s  a  list  of  100  rules 
(for  example,  “Don’t  bad-mouth  your 
boss,”  “Fight  for  your  team”),  each  fol¬ 
lowed  by  a  page  or  two  of  explanation 
about  how  to  carry  out  that  rule.  Al¬ 
though  it’s  tough  to  provide  much 
depth  on  how  to  inspire  loyalty  from 
your  troops  in  just  two  pages,  this  step- 


by-step  template  is  a  useful  guide  for 
new  managers  and  a  handy  reference 
for  seasoned  bosses  as  well. 


■  In  the  Line  of  Fire:  How  to  Handle  Tough 
Questions . . .  When  It  Counts,  Jerry  Weiss- 

man  (Prentice  Hall,  185 pages,  $24.95). 

ON  the  surface,  this  may 

not  seem  like  the  typical  IT 
management  book.  But  as 
IT  executives’  roles  have 
evolved,  many  have  been  thrust  into 
public  speaking,  frequently  needing  to 
make  presentations  to  intimidating 
boards  of  directors  or  hundreds  of  at¬ 
tendees  at  industry  conferences. 

While  a  good  presentation  can  leave 
your  audience  nodding  in  agreement, 
an  imminent  threat  lurks  beyond  the 


final  PowerPoint  slide:  the  Q&A  ses¬ 
sion.  This  book,  written  by  an  ac¬ 
claimed  presentations  coach  who  has 
worked  with  executives  at  hundreds  of 
companies,  including  Yahoo  Inc.,  Intel 
Corp.  and  Cisco  Systems  Inc.,  is  aimed 
at  helping  speakers  handle  tough  ques¬ 
tions  with  aplomb. 

A  quick  read  at  185  pages,  In  the  Line 
of  Fire  is  nonetheless  packed  with 
practical  advice  and  real-world  exam¬ 
ples.  For  instance,  it  dissects  the  mis¬ 
takes  incumbent  George  H.W.  Bush 
made  when  he  bungled  a  question  on 
the  national  debt  during  a  “town  hall” 
presidential  debate  with  Bill  Clinton. 

The  premise  of  the  book  is  that  suc¬ 
cess  centers  on  taking  control  of  ques¬ 
tions  by  various  means,  such  as  para¬ 
phrasing  them  to  your  advantage  and 
managing  the  answer  with  confidence. 
Wcissman’s  advice  is  useful  for  anyone 
who  has  had  to  field  a  tough  question 
from  a  huge  audience,  a  small  group  of 
staffers  or  a  hostile  executive.  ©  56096 
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EXEC  TRACK 


Playboy  Appoints 
Senior  VP,  CIO 

Playboy  Enterprises  Inc.  in  Chica¬ 
go  announced  the  appointment 
of  MARK  LAUDENSLAGER  as  se¬ 
nior  vice  president  and  CIO.  Lau- 
denslager  comes  from  Walt  Dis¬ 
ney  Internet  Group,  where  he 
was  vice  president  of  technical 
operations.  Previously,  he  was 
vice  president  of  operations  at 
ServerVault  Corp.  and  head  of 
e-business  infrastructure  at 
Capital  One  Financial  Corp. 


Allconnect  Picks 
Singer  as  CIO 

Allconnect  Inc.,  a  provider  of 
home  relocation  services  in 
Atlanta,  has  chosen  NEIL  J. 
SINGER  as  executive  vice  presi¬ 
dent  and  CIO.  Singer  comes  to 
Allconnect  from  LandAmerica 
Financial  Group  Inc.,  where  he 
was  senior  vice  president  of 
e-strategy  and  president  of 
the  company’s  mortgage  pro¬ 
cessing  venture.  Previously,  he 
was  chief  technology  officer  at 
HameBytes.com  Inc.  and  CIO  at 
GE  Capital  Consumer  Financial 
Services. 


Private  Healthcare 
Taps  Jackson 

Private  Healthcare  Systems  in 
Waitham,  Mass.,  announced  the 
promotion  of  FRANK  JACKSON 
to  CIO.  Jackson  joined  PHCS  in 
March  as  vice  president  of  appli¬ 
cations  delivery.  Before  that,  he 
was  CTO  at  Blue  Cross  and  Blue 
Shield  of  North  Carolina  and  CIO 
at  Kaiser  Permanente  of  North 
Carolina. 


Northrop  Names 
Lofton  Sector  CIO 

Northrop  Grumman  Corp.  has 
named  ART  LOFTON  vice  presi¬ 
dent  and  CIO  of  the  company’s 
Integrated  Systems  sector  in  El 
Segundo,  Calif.  Lofton  most  re¬ 
cently  served  as  deputy  manager 
of  the  long-range  strike  program 
for  Integrated  Systems. 


Good  Numbers 
And  Bad 


JOHN  COLUMBUS 


FOR  the  PAST  22  YEARS,  I’ve  worked  with 
computers.  The  basic  concept  of  electronic 
computers  is  binary  numbers:  a  1  and  a  0,  the 
presence  of  something  like  voltage  or  its  ab¬ 
sence.  The  advantage  of  computers  and  math 
is  the  same.  Both  are  either  right  or  wrong.  In  my  first 
full  year  as  a  computer  programmer,  this  was  vividly 
proved  to  me. 


The  Lotus  1-2-3  spread¬ 
sheet  application  had  just 
come  out,  and  my  insur¬ 
ance  branch  employer  had 
me  use  it  to  create  our  in¬ 
surance  agencies’  profit/ 
loss  statements.  They  gave 
me  the  raw  information 
and  the  previous  paper- 
based  calculation.  I  real¬ 
ized  that  this  calculation 
wasn’t  mathematically  cor¬ 
rect,  and  I  informed  the  top 
boss.  He  assured  me  that  it 
was  right  but  admitted  there  was  a 
longer,  more  accurate  calculation. 

I  did  a  proof  that  showed  that 
the  two  calculations  weren’t  related 
to  each  other.  Still,  he  still  ordered  me 
to  use  the  quicker  calculation,  which 
I  did. 

My  bosses  evaluated  the  results  and 
severed  one  agency’s  contract.  Then  I 
redid  the  report  using  the  more  accu¬ 
rate  calculation.  It  was  now  very  obvi¬ 
ous  that  the  simple  calculation  unfair¬ 
ly  weighted  sales  growth  at  the  ex¬ 
pense  of  profit.  They  had  kept  the 
company  that  had  increased  sales  but 
was  unprofitable  and  fired  the  compa¬ 
ny  that  had  steady  but  profitable  sales. 

I  have  seen  executives  look  at  num¬ 
bers  they  don’t  understand  and  simply 
accept  them  as  valid  because  some  ex¬ 
pert  said  they  were.  I  have  heard  of 
people  using  bad  calculations  to  mea¬ 
sure  performance  and  driving  their 
companies  into  the  ground. 


The  sad  part  is  that  the 
right  calculations  don’t 
take  very  much  time  to  dis¬ 
cover.  Here  are  two  truths 
that  will  help  you  get  qual¬ 
ity  numbers. 

A  valid  measurement  starts 
with  properly  describing  reality. 
People  get  confused  when 
trying  to  determine  how  to 
describe  customer  desires, 
employee  happiness  or 
production  defects.  Don’t 
let  the  complex  jargon  of 
quality  programs  throw  you  off;  basic 
math  is  all  you  need  for  any  measure¬ 
ment,  as  long  as  it’s  sound  math. 

But  before  you  calculate,  realize  that 
when  you  manage  to  a  number,  it’s  a 
means  of  leading  people  to  a  goal.  De¬ 
termine  what  you  want  to  change  and 
state  the  goal  you’re  trying  to  reach 
in  simple  terms  so  you  can  see  if  the 
numbers  lead  to  that  goal. 

Then  remember  the  goal.  If  you’re 
trying  to  improve  customer  satisfac¬ 
tion,  for  example,  you  can  use  surveys 
that  determine  the  product  features 
and  services  that  make  your  cus¬ 
tomers  happy.  Remember,  though,  that 
a  survey  that  measures  complaints 
doesn’t  measure  customer  happiness; 
it  measures  complaints. 

A  common  bad  measurement  is  ra¬ 
tios  in  which  the  two  numbers  have  no 
bearing  on  each  other.  The  top  num¬ 
ber  (numerator)  must  accurately 
describe  part  of  the  lower  number 


(denominator).  If  there  is  no  relation¬ 
ship,  the  numbers  make  no  sense. 

For  example,  management  wants 
to  know  if  help  desk  calls  increase 
because  of  company  growth  or  proc¬ 
ess  problems.  Help  desk  calls  are  a 
subset  of  employee  access  to  comput¬ 
ers.  The  more  systems  an  employee 
accesses,  or  the  more  employees  who 
have  access,  the  higher  number  of 
calls  because  of  the  greater  chance 
of  defects. 

But  I’ve  seen  management  try  to 
equate  help  desk  growth  with  growth 
in  the  number  of  servers.  Server  count 
has  no  direct  bearing  on  help  desk 
tickets.  If  I  consolidate  five  servers 
into  one,  does  that  mean  my  help  desk 
tickets  will  automatically  decrease? 

Of  course  not. 

The  easiest  measurement  may  not  be  the 
best  measurement.  Remember  my  earlier 
example  about  the  easy  calculation?  It 
was  simple  for  people  to  do,  so  they 
preferred  it.  But  it  led  away  from  in¬ 
creasing  profits. 

Another  favorite  of  mine  is  comput¬ 
er  uptime.  It’s  easy  to  calculate  and 
usually  looks  good.  My  machine  is 
down  an  average  of  only  five  minutes 
a  month.  Wow,  it’s  up  99.988%  of  the 
time.  But  out  of  the  168  hours  in  a 
week  that  the  machine  is  running,  I 
may  want  to  use  it  for  only  50  hours. 
The  fact  that  it  was  running  for  the 
other  118  hours  is  meaningless  to  me. 

Employees  are  led  by  the  numbers 
you  manage  to.  If  the  scores  don’t 
measure  progress  toward  real  goals, 
they’ll  drive  your  company  right  off 
a  cliff.  If  you  don’t  know  whether  a 
number  is  good,  challenge  it.  If  you 
know  it’s  bad,  fix  it. 

Don’t  settle  for  easy  to  calculate.  Be¬ 
ing  out  of  business  is  easy  to  calculate. 
It’s  zero.  O  56097 


WANT  OUR  OPINION? 

OFor  more  columns  and  links  to  our  archives,  go  to 

www.computenivorld.com/opinions 


john  columbus  is  the 
owner  of  Columbus  Con¬ 
sulting  Group  in  New 
Hope,  Minn.  Contact  him 
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2nd  Annual 

COMPUTEBWOBLD 

<► 

BUSINESS 

INTELLIGENCE 

PERSPECTIVES 

September  26-28,  2005 
Hyatt  Regency  at 
Gainey  Ranch 
Scottsdale,  Arizona 


To  see  complete  agenda  details 
and  to  register  now,  visit: 


www.biperspectives.com/cw 


Witness  Real  Solutions  for  Achieving 
Business  Intelligence  Success 


Featured  Speakers  Include:  Get  Expert  Opinion  From: 


8  JAMES  BELL 

General  Manager,  Operating  Services 
Union  Pacific  Railroad 


KEITH  GILE 

Principal  Analyst 
Forrester  Research 


BJON  FARRAR 

Vice  President,  Predictive  Modeling 
Union  Bank  of  California 

TONY  FULLER 

Vice  President  &  Chief  Information  Officer 
Rent-A-Center 

ANDY  GEORGE 

Senior  Vce  President  of  Technology 
Profitline 

K  ROBERT  GRAY 

Vce  President,  Infrastructure  Metrics 
Bank  of  America 

BRIAN  HICKIE 

^  Vce  President,  Business  Intelligence 
^j|  McKesson  Corporation 


The  Leading  Executive 
Conference  on: 

•  Business  Intelligence  Applications 

•  Performance  Management 

•  Risk  Management 

•  Analytic  Technologies 

•  Data  Warehousing  and  Mining 

•  CRM  and  ERP 

•  Regulatory  IT 

•  Best  Practices  in  Bl 


BARBARA  KINDEL 

Vice  President,  IS  Solutions  Engineering 
Calpine 


STACY  SMITH 

Vice  President  &  Chief  Information  Officer 
Intel 


Sponsored  by 


LAWSON 


Pre- Conference  Golf  Outing 

Complimentary  for  Registered  IT  End-Users 

Pre-Conference  Golf  Outing  at  the  Gainey  Ranch 
Golf  Club  on  Monday,  September  26th  at  12:45pm 


Owned  and  Produced  by 


COMPUTERWOBLD 


See  solutions  from  companies  including: 
CONFERENCE  UNDERWRITER 


(as  of  8/25/05) 


THE  NEXT  LEVEL 
OF  PERFORMANCE7 


Business  Objects' 
ORACLE’ 


PLATINUM  SPONSORS 
Information  j  Ent«rprt»« 

Beiders  XSSL 

jisas^ 

The  Power  to  Know. 


LAWSON' 

Teradata 

a  division  of  Q0  NCR 


MEDIA  &  ASSOCIATION  SPONSORS 

IgHtHlIeiieliiptitMs  •  £2E£IE_  CNNIOiMI 

'  EcoS.tS±2  BIST  ECTanslon 

For  sponsorship  opportunities,  call  John  Amato  at  508-820-8279 


COMPUTERWORLD  August  29, 2005 


MARKETPLACE 


www.computerworld.com 


BEST  VALUE! 

Level  1  &  2  Set  £32?  $296.1 0 


Finally,  a  different  approach  that  has  millions  of  people  talking.  Using 
the  award-winning  Dynamic  Immersion"  method,  our  interactive  software 
teaches  without  translation,  memorization  or  grammar  drills.  Combining 
thousands  of  real-life  images  and  the  voices  of  native  speakers  in  a  step-by- 
step  immersion  process,  our  programs  successfully  replicate  the  experience 
of  learning  your  first  language.  Guaranteed  to  teach  faster  and  easier  than 
any  other  language  product  or  your  money  back.  No  questions  asked. 


Rosetta  Stone  is  available  for  learning: 

Arabic  •  Chinese  •  Danish  •  Dutch  •  English  •  French  •  German  •  Greek  •  Hebrew  "Hindi  •  Indonesian 
Italian  •  Japanese  •  Korean  •  Latin  •  Pashto  •  Polish  •  Portuguese  •  Russian  •  Spanish  •  Swahili  •  Swedish 
Thai  -  Turkish  •  Vietnamese  •  Welsh 


Award-winning  software  successfully  used  by  U.S.  State  Department 
diplomats.  Fortune  500®  executives  and  millions  of  people  worldwide. 


“...your  program  is  the  absolute  best,  bar 
none.  I  am  shocked  at  how  quickly  I  learn." 

Michael  Murphy  -  Texas,  USA 

"Stupendous.. .the  juxtaposition  of  text, 
sound  and  picture  was  masterful.  The 
quality  of  both  sound  and  graphics 
was  first  rate."  The  Boston  Globe 


SAVE 

10% 


Level  1  CD-ROM  J$4W 
Level  2  CD-ROM  4225" 


Your  Price 

$175.50 

$202.50 


Personal  Edition.  Solutions  for  organizations  also  available. 


Call  today  or  buy  online 
for  a  10%  discount. 

RosettaStone.com/cws085 

1-888-232-9198 

Use  promotional  code  cws085  when  ordering. 


Rosett 

Language  Learning 


taStone' 

g  M?:  Success 


i 


The  Smart  Choice  for  Text  Retrieval 


Search 
of  Text 


since  1991 


♦  over  two  dozen  indexed, 
unindexed,  fielded  and 
full-text  search  options 

♦  highlights  hits  in  HTML,  XML 
and  PDF  while  displaying 
embedded  links,  formatting 
and  Ifi'i'Mtl'rH 

♦  converts  other  file  types 
(word  processor,  database, 
spreadsheet,  email,  ZIP, 
Unicode,  etc.)  to  HTML  for 
display  with  highlighted  hits 


Reviews  of  dtSearch 

♦  “The  most  powerful  document  search 
tool  on  the  market”  —  Wired  Magazine 

♦  “dtSearch ...  leads  the  market” 

— network  Computing 

♦  “Blindingly  fast”  —  Computer  Forensics: 
Incident  Response  Essentials 

♦  “A  powerful  arsenal  of  search  tools” 
—  The  New  York  Times 

♦  “Super  fast,  super-reliable” 

—  The  Wall  Street  Journal 

♦  “Covers  all  data  sources ...  powerful 
Web-based  engines”  -  eWEEK 

♦  “Searches  at  blazing  speeds” 

—  Computer  Reseller  News  Test  Center 


See  www.dtsearch.com  for  hundreds  more  reviews  &  case  studies 

Bmnauann 


OrderyowrS now!  P 

T-800-708-5191 

www.woodmarupal.com 


all  types  of  outdoorsmen 
1  Hiking  •  Gardening 
Clear  brash  ,  * 


USA  Made  Since  1941 

Handles  like  a  machete,  delivers  the  powerful  cutting  performance  of  an  axe] 
Lightweight  (23  oz.);“  compact  (17").  Tempered  steel  blade  and  uni 


•  Prune 

•  Blaze  trails 

•  Open  walking 


-Since  1941  - 
THE  ORIGIN AL 


Irodemorfc 


BOYERTOWN,  PENNSYLVANIA  “  ““ 
Order  secure  online.  Dealers  welcome.  Manufactured  by  hand  exclusively  by  Pro  Tool  Industries,  Inc. 


Reach  Respected  IT  Leaders  in 

COMPUTERviiRL^ 

Marketplace  Advertising  Section 

The  Computerworld  Marketplace  advertising  section  reaches  more  than 
1.8  million  IT  decision  makers  every  week.  Marketplace  advertising  helps 
Computerworld  readers  compare  prices,  search  for  the  best  values,  locate 
new  suppliers  and  find  new  products  and  services  for  their  IT  needs. 

To  advertise,  call  212-655-5157 
or  email  print@ven.com 


Top  10  reasons  why  you 
should  advertise  your 
recruitment  message  with 
IT  Careers. 


IT  Careers  Audience  Skill  Survey 
2003/2004 

Client  Operating  Systems 
IS/MIS/IT 

Server/Host  Operating  Systems  (NET) 
Windows  2000 

LAN/WAN  Environment  (NET) 
Languages  &  Tools  (NET) 

Windows  NT 
Dev.  Tools/Environments 
Software/Applications  Dev. 
Networking/Telecom 


Your  direct  line  of  communication  to 
qualified  IT  Professionals  with  the 
most  in-demand  IT  skills. 


careers 


800-762-2977 

Visit  us  online  at 
www.itcareers.com 


CW082905E/MW/W.  1 


Computerworld  - 


DolphinSearch,  Inc.,  located 
in  Ventura,  CA,  seeks  a  Soft¬ 
ware  Engineer.  The  position 
requires  a  Masters  degree  in 
Computer  Science  or  equiv¬ 
alent  and  1  year  experience 
in  systems  analysis,  infor¬ 
mation  retrieval  and  com¬ 
plex  problem  solving.  Fax 
resumes  to  Tina  Killion,  HR 
Manager  at  805-648-7 1 50  or 
mail  resumes  to  Dolphin- 
Search,  Inc.,  5855  Olivas 
Park  Drive,  Ventura,  CA, 
93003,  Attn:  Tina  Killion. 


Senior  Manager,  Net¬ 
work  Engineering,  to  ov¬ 
ersee  corporate  network 
&  server  infrastructure. 
Requires  MS  in  Comp 
Eng  or  Comp  Sci  or  equi¬ 
valent  &  relevant  experi¬ 
ence.  Send  resume  to 
CancerVax  Corp.  2110 
Rutherford  Rd  Carlsbad, 
CA  92008  or  email  to 
iobs@cancervax.com. 


Software  Architect  wanted  by 
Insurance  Data  Processing  (IDP, 
located  in  Wyncote,  PA)  to  cus¬ 
tomize  software  for  the  insur¬ 
ance  industry  in  the  property 
and  casualty  segment  Candid¬ 
ates  must  have  MS  or  BS+5year 
experience  in  IT  field.  Please 
apply  at  resumes@idpnet.com. 
EOE. 

Synova  has  multiple  openings 
for  Project/Software  Engineers. 
System  Analysts,  DBA.  Our  cli¬ 
ents  include  Fortune  500  Candi¬ 
dates  must  have  MS  or  BS  with 
experience.  We  offer  attractive 
wage  with  full  benefits.  Travel 
maybe  required.  Email  resume 
to  ads@svnovainc.com.  EOE. 
No  calls. 


Programmer-Analyst  needed  at 
unanticipated  client  sites  to 
dsgn  ETL  architecture  for  pro¬ 
jects,  dvlp  the  s/ware  dsgn  doc¬ 
uments  per  the  SRS  provided  to 
ETL  using  Ab  Inito,  describe 
ETL  flow  in  the  SDD;  create 
high-level  dsgn  documents  us¬ 
ing  Visio;  dvlp  ETL  graphs;  con¬ 
duct  unit  testing;  dvlp  scripts; 
migrate  code  in  FAT  envrmt; 
support  implmtn;  provide  rotat¬ 
ing  30-day  support  coverage  & 
provide  end-user  training  &  doc¬ 
umentation.  Resume  to:  CS 
Solutions,  2626  E.  82nd  St 
#151,  Bloomington,  MN  55425. 


Automation/Programmer  Ana¬ 
lyst  at  engineering  firm  needed 
to  automate  all  working  proces¬ 
ses  using  commercial  business 
practices,  SQL  and  ASP  to  tie- 
in  these  systems  together  to 
create  an  "Only-Once"  relation¬ 
al  system  that  will  encompass 
Human  Resources,  Account¬ 
ing,  Petrochemical  Engineering 
Projects,  Information  Technolo¬ 
gies  and  Purchasing  and  Pro¬ 
curement.  Coordinate  and  hold 
training  sessions  for  all  pro¬ 
grams  created  to  accomplish 
these  tasks.  Send  resumes  to: 
Bandini  Enterprises,  Inc.  in 
Pasadena,  TX  at:  alselcer@ 
bei-us.com.  Put  job  code  AS 
on  resume. 


August  29,  2005 


Computer  Systems  Hardware 
Analyst  (Augusta,  GA).  Job  Dut¬ 
ies:  Developing  and  implement¬ 
ing  enhancements  to  existing 
applications,  porting  applica¬ 
tions  to  new  technology,  con¬ 
verting  custom  applications  to 
package  capabilities,  and  assist¬ 
ing  in  keeping  current  applica¬ 
tions  operating  at  peak  efficien¬ 
cy;  modifying  applications  in  a 
variety  of  operating  system  envi¬ 
ronments,  as  well  as  responsibil¬ 
ity  for  implementing  data  ware¬ 
housing  techniques,  including 
Kimball  and  Inman;  data  mining 
and  extraction;  analysis  of  user 
needs  and  development  of  soft¬ 
ware  solutions.  Analyze  and 
design  databases  within  an 
application  area,  working  indi¬ 
vidually  or  coordinating  data¬ 
base  development  as  part  of  a 
team  Minimum  skills:  B.S.  in 
Information  Systems,  Mathema¬ 
tics/Statistics,  Software  Engin¬ 
eering,  or  other  technical  field. 
Must  have  four  years  of  prior  IT 
experience  with  applications 
development  in  an  industrial  or 
manufacturing  context  including 
at  least  two  years  EAI  Architec¬ 
ture  experience  with  WebMeth- 
ods  6.0  or  6.1  TO  APPLY  FOR 
THIS  JOB  YOU  MUST  MEET 
ALL  THE  ABOVE  REQUIRE¬ 
MENTS.  Send  resume  to  Donna 
Edwards;  Electrolux  Home  Pro¬ 
ducts,  Inc.,  P.O.  Box  35920. 
Cleveland.  OH  44135  or  fax  to: 
(216)  898-2340. 


Computer  Software  Engineer 
•  Applications 

Must  design,  develop,  maintain, 
modify,  write,  test,  document 
and  implement  computer  appli¬ 
cations  software  for  a  variety  of 
PC  and  server  platforms.  Ana¬ 
lyze  user's  needs  and  develop 
software  applications.  Identify 
and  implement  new  technolo¬ 
gies  for  multiple  lines  of  busi¬ 
ness  with  telephony,  multimedia 
and  internet  deployments  using 
a  variety  of  protocols  Must  pro¬ 
vide  support  to  multiple  remote 
locations  in  and  out  of  normal 
business  hours.  Travel  required. 
Must  be  proficient  in  Java,  C# 
and  C++  to  develop  real  time 
applications  that  execute  under 
Windows  98/XP  PCs  utilizing 
SQL  server  and  other  data  base 
management  systems,  IIS  and 
Apache  TomCat  webservers; 
HTML,  Microsoft  Studio. Net.  Cy- 
base  MSSQL,  MySQL,  ASP.Net; 
understanding  of  wireless,  inter¬ 
net  capable  protocols;  strong 
understanding  of  audio  CoDecs, 
video  CoDecs  and  SIP  program¬ 
ming.  Bachelor  of  Science  De¬ 
gree  in  Engineering  (Computer 
and  Information  Science)  or 
equivalent  degree,  plus  three 
years  experience.  40  hours  per 
week.  Must  have  authorization 
to  work  in  the  United  States. 
Employer  is  located  in  Aurora, 
Nebraska,  a  city  with  a  popula¬ 
tion  of  4,000.  Send  resume  to 
Nedelco,  Inc.,  1001  12th  Street, 
Aurora,  Nebraska  68818. 


Software  Project  Manager  w / 
Masters  in  Comp  Sci  or  Engg  or 
Math  &  lyr  exp  to  plan,  organize 
&  coord  S/W  dvlpmt  projects. 
Gather  systms  reqmts  from 
users  &  translate  then  to  UML 
diagrams.  Dsgn  &  dev  large  web 
applic.  using  industry  standard 
OOA&D  techniques,  SDLC  prin¬ 
ciples  &  s/ware  dsgn  patterns. 
Analyze,  dsgn  &  dev  web  applic 
using  J2EE,  Java,  Websphere, 
VB,  ASP,  IBM,  DB2,  MS  SQL 
Server,  MS  Project  &  JSP  on 
Windows  platform.  Supv.  2 
Prgmrs.  Exp  prior  to  completion 
of  Masters  Degree  is  accept¬ 
able.  Mail  resume  to:  Soft  Tech 
Source,  A  Div.  of  Ramesh  Sarva 
CPA,  PC.,  109-17  72nd  Rd,  Ste 
#6-R,  Forest  Hills,  NY  11375. 
Job  loc:  Forest  Hills,  NY  or  in 
any  unanticipated  locations  in 
USA. 


SENIOR  BUSINESS 
SYSTEMS  ANALYST 

Hicksville,  New  York.  Work  clos¬ 
ely  with  business  units  to  gather 
systems  development  require¬ 
ments  and  lead  resulting  pro¬ 
jects;  develop  project  plans, 
track  and  report  project  status  to 
management  and  ensure  quality 
delivery  of  IT  services;  serve  as 
liaison  between  designated  bus¬ 
iness  units  and  the  IT  depart¬ 
ment;  prepare  ad-hoc  and  stan¬ 
dard  reports  for  management; 
meet  with  business  unit  man¬ 
agement  on  a  regular  basis  to 
determine  opportunities  to  im¬ 
prove  current  processes  through 
changes  to  current  systems  or 
by  implementing  new  systems; 
document  systems  development 
requests  and  prepare  develop¬ 
ment  specification  for  internal 
resources  or  for  use  in  an  RFQ 
distributed  to  external  resourc¬ 
es;  prepare  and  update  project 
plans;  present  project  status 
reports  to  management;  and 
prepare  reports  for  management 
using  spreadsheets  and  data 
warehouse  tools. 

Competitive  Salary.  Must  have  a 
Master's  Degree  in  Information 
Systems  or  related  or  CIS  Equi¬ 
valent  (Bachelor's  Degree  plus 
five  (5)  years  of  experience), 
material  planning  and  user  train¬ 
ing  experience,  plus  application 
development  using  the  following 
languages:  MS  SQL,  Active  Ser¬ 
ver  Webpage  Design,  HTML, 
Java,  Crystal  Reports,  and  Visio. 
Must  have  legal  authority  to 
indefinitely  work  in  the  U.S. 
Please  email  resume  demon¬ 
strating  all  minimum  require¬ 
ments  to: 

careers@kozyshackcom 
or  fax  to  (516)  870-3097.  EOE. 


Project  Manager:  Manage,  exe¬ 
cute  and  deliver  projects,  which 
includes  Analysis  of  user  requ¬ 
irements.  design,  development 
and  testing  to  automate  proces¬ 
sing  and  to  improve  existing 
computer  systems.  Devise  alter¬ 
natives  with  clients,  designing 
architecture  based  on  web  tech¬ 
nologies  using  XML.  Java,  .NET 
and  web  infrastructure  like  web 
servers,  database  servers  and 
application/transaction  servers. 
Design  and  architect  new  com¬ 
puter  systems  and  solution  uti¬ 
lizing  Rational  Rose,  JBuilder, 
Poseidon,  CodeWarrior,  Visual 
Cafe,  and  Visual  Source  Safe. 
Manage  projects  in  J2EE,  Dot 
Net  Technology,  ASP.Net.  VS- 
Net,  C#,  Biz  Talk,  and  Oracle. 
Work  on  multiple  operating  sys¬ 
tems  such  as  Unix  and  Windows 
NT/2000  environment.  Masters 
or  Equivalent  in  Computer  Sci¬ 
ence,  MIS,  CIS,  Engineering 
(any  field),  Business,  Technol¬ 
ogy,  Mathematics  or  related 
field.  Minimum  two  years  of 
experience  in  the  computer 
related  field  in  the  above  job 
duties.  Salary  will  commensu¬ 
rate  with  experience.  Please 
email  resume  to:  sheridan. porter 
@catalytic.com  or  mail  to. 
Catalytic  Software,  Continental 
Plaza,  550  Kirkland  Way,  Suite 
404,  Kirkland  WA  98033. 


Software  Project  Manager  need¬ 
ed  w/Masters  or  foreign  equiv.  in 
Engg.  or  Comp.Scie.  or  Math  & 
1  yr.  exp  to  plan,  organize,  direct 
&  coordinate  IBM  mainframe 
based  technologies  for  invest¬ 
ment  Banking  s/ware  develop¬ 
ment  projects.  Design,  develop 
&  create  s/ware  applies,  using 
industry  standard  OO&D  tech¬ 
niques,  SDLC  principles  & 
s/ware  design  patterns.  Analyze 
application  s/ware  w/IDMS, 
DB2,  Eazytrieve,  COBOL,  CICS, 
PL/1  &  Java.  Gather  system 
requirements  from  clients  & 
translate  in  the  form  of  UML  dia¬ 
grams  &  RUP  documents.  De¬ 
velop,  maintain  &  track  compre¬ 
hensive  project  plans  using  MS 
Project.  1  yr  exp  as  a  Software 
Analyst  is  acceptable.  Supv.  2 
employees.  Send  resumes  to 
BCC  USA,  Inc.  43  Stouts  Lane, 
Monmouth  Junction,  NJ  08852. 
Job  location:  Monmouth  Junc¬ 
tion,  NJ  or  in  unanticipated  loca¬ 
tions  in  the  U.S. 


Software  Engineers:  NuWare 
Technology  Corporation  is  look¬ 
ing  for  Software  Engineers  with 
relevant  degree  and  exp  in 
some  of  the  following  areas  or 
combination  thereof.  Analyze, 
design,  develop  and  deploy 
business  applications  including 
but  not  limited  to  Data  Ware¬ 
house  and  Business  Intelligence 
System  using  some  of  the  fol¬ 
lowing  or  combination  thereof: 
ERWIN,  COGNOS,  Sybase, 
UNIX  or  NT,  Control-M,  Java¬ 
script,  HTML,  Crystal  Reports, 
Visual  Basic,  ASP,  J2EE,  C++, 
Visual  Studio.net,  XML,  XSL, 
WebServices,  Oracle/Sybase/ 
SQLServer,  Weblogic/Websph- 
ere/MQSeries.  Top  $$.  Mail  res¬ 
ume  to:  NuWare  Technology 
Corporation,  120  Wood  Avenue 
South,  Suite  404,  Iselin,  NJ 
08830. 


Mergent,  Inc.  seeks  Technical 
Project  Leader,  Asian  Markets 
for  Charlotte  office  to  design, 
develop  &  implement  financial 
input  systems  &  products  for 
Asian  &  other  regional  mkts. 
Designs  &  coordinates  software 
efforts  w/contracted  software 
developers  &  clients  in  Asia. 
Req.  M.S.  in  Comp  Sci,  Comp 
Eng  or  Bus  Admin  &  4  yr  exp  to 
incl  network  programming  & 
devpmt  of  multi-threaded  data 
systems  appls  for  corporate, 
municipal  &  govmt  financial  info 
systems  data  capture  w/Delphi  6 
or  higher,  object-oriented  design 
/programming  &  HTML,  Java,  & 
Perl  or  similar.  Req  fluency  in 
English  &  Mandarin.  Resume  to 
VP  HR  &  Administration, 
Mergent,  Inc.,  5250  77  Center 
Dr,  Ste  150,  Charlotte,  NC 
28217.  No  relocation.  No  calls  or 
in  person  applications  accepted. 


BUSINESS  MANAGEMENT 
ANALYST  w/Bach  or  foreign 
equiv  in  Bus  Admin  or  Acctg  & 
HR  Mgmt  &  2yrs  exp  to  analyze 
business  SOPs.  Gather  info 
from  business  user  to  dsgn  & 
implmt  effective  solutions  by 
creating  business  plans,  func¬ 
tional  specs  using  MS  Project, 
Caliber  RM,  MS  Visio,  Excel, 
Word,  IBM  Rational  Requisite 
Pro.  Review  project  plan  & 
implmt  same.  Mail  resumes  to: 
KGF  Associates,  Inc.,  777 
Washington  Rd,  Parlin,  Ste  1, 
NJ  08859.  Job  Loc:  Parlin,  NJ 
or  any  unanticipated  locations 
in  the  USA. 


Seeking  qualified  applicants  for 
the  following  position  in  Prince¬ 
ton,  NJ:  Programmer/Anaiyst: 
Design,  develop,  configure 
code,  implement,  edit,  and 
maintain  user  application  pro¬ 
grams.  Modify  existing  applica¬ 
tion  and  provide  systems  sup¬ 
port.  Analyze  user’s  requirement 
to  enhance  system  perfor¬ 
mance.  Req.  BS  or  equivalent  in 
CS,  CIS,  MIS,  ME,  EE,  CE  or 
related  field  with  5  yr.  exp.  in  job 
offered.  Must  be  proficient  in 
ERP,  SAP  and  PeopleSoft. 
Willing  to  re-locate  in  USA  as 
needed.  Send  resume  to 
kumar@e-zencomp.com. 


Computer  Professional  (Plains- 
boro)  NJ  based  IT  firm,  Jr.  Lvl 
Posi's  Progmr  Analysts,  S/ware 
Engrs,  Syss  Analysts,  to  dvlop, 
create,  modify  general  computer 
applic’s  s/ware  or  specialized 
utility  programs  Analyze  user 
needs  &  dvlop  s/ware  solutions. 
Sr.  Lvl  Posi'n,  IT  Managers,  MIS 
Managers,  ITS  Directors  needed 
to  plan,  direct,  or  coordinate 
activities  in  such  fields  as  elec¬ 
tronic  data  processing,  informa¬ 
tion  systems,  systems  analysis, 
and  computer  programming. 
Apply  w/  2  copies  of  resume  to 
H.R.D,  Accurate  Software  Inter¬ 
national,  Inc.,  408  B,  Plainsboro 
Road,  Plainsboro  NJ  08536. 


Sr.  Database  Admn.,  Ft. 
Lauderdale;  Design,  Develop, 
Test,  Install,  Deploy,  Inte¬ 
grate,  Enhance  &  Admn.  Da¬ 
tabases  Applying  Knowledge 
Of  Database  Management 
Systems  Such  As  Perl,  Sql, 
Pl/Sql,  Java/Xml  &  Vb/Asp/ 
Sql  Server  Environments, 
Com/Com+/Dcom.  Establish 
&  Maintain  Security  &  Integrity 
Controls.  Reqd.  B.S.C.S  &  2 
Yrs  Exp.  M-F,  40hrs/Wk.  Fax 
Resume  to  Capital  Furniture 
Distributing  954-485-0022. 


Oracle  Applications  Software 
Engineer.  Bachelor’s  degree  or 
foreign  equiv.  in  computers  or 
electrical  engineering.  3  yrs 
experience  as  Computer  Soft¬ 
ware  Engineer.  3  yrs.  experi¬ 
ence  must  consist  of  implemen¬ 
tation,  system  admin,  custom¬ 
ization,  configuration,  integration 
with  API  data  feeds  and  support 
or  Oracle  E-Business  Suite  11  i 
in  (1)  Oracle  Financials  AP,  AR, 
GL,  CM,  and  FA;  (2)  Oracle  Pur¬ 
chasing;  and  (3)  i-procurement 
modules  through  Unix  Sun 
Solaris  or  Linux  environments. 
Please  email  resumes  to 
deborah.meacham@acntv.com. 


Computer  Programmer 
for  tech  consultants  in 
Coral  Gables  FI.  Must 
have  bachelor  degree  in 
computer  science.  Will 
convert  project  specs  for 
coding  to  computer  lan¬ 
guage.  Develop/write 
programs  to  store, 
retrieve  data;  will  pro¬ 
gram  web  sites.  Resume 
toAuxis,  55  Miracle  Mile, 
#300,  Coral  Gables,  FI 
33134. 


IT  Manager  needed  for 
(Merrimack)  NH  based  IT 
firm  to  Plan,  direct,  or  coor¬ 
dinate  activities  in  Software 
Configuration  Management 
and  Release  Engineering. 
Should  have  hands  on  ex¬ 
perience  in  systems  analy¬ 
sis,  Rational  tools,  UCM, 
Database,  Visual  Basic  and 
Perl.  Apply  with  2  copies  of 
resume  to  HR.  Dept, 
Roshitech,  Inc.,  5  Castleton 
Court,  Merrimack,  NH 
03054. 


Trans  American  Power  Prod¬ 
ucts,  Inc.,  located  in  Houston, 
Texas,  a  leader  in  the  manu¬ 
facturing  of  steel  poles,  seeks 
an  experienced  software  en¬ 
gineer  to:  develop  and  imple¬ 
ment  ERP  using  .NET  plat¬ 
form  and  MFC,  maintain  and 
design  SQL  for  different  appli¬ 
cations  and  develop  CNC 
software  applications  used  in 
the  engineering  of  products. 
Send  resume  to:  President, 
2427  Kelly  Lane,  Houston, 
Texas  77066.  Put  job  code 
AF123  on  resume. 


Find  out  how  to  get  the  most  out  of 
your  job  search  and  your  career. 
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Basel 


or  not  at  all  improve  the  capi¬ 
tal  positions  of  banks. 

The  measure  requires  that 
by  2007  all  European  banks 
and  the  largest  banks  in  the 
U.S.  tighten  integration  of 
back-office  systems  and  use 
more-sophisticated  risk  man¬ 
agement  tools  to  lower  the 
amount  of  capital  that  must  be 
set  aside  to  cover  operational 
and  credit  risks.  Other  U.S. 
banks  are  opting  into  the  ac¬ 
cord  voluntarily. 

Adam  Stone,  a  security  man¬ 
agement  analyst  who  asked 
that  his  financial  services  com¬ 
pany  not  be  named,  said  bank¬ 
ing  leaders  are  painting  a  rosy 
picture  about  the  cost  of  Basel 
II  in  the  belief  that  implemen¬ 
tation  will  reduce  risk. 

“Organizations  are  just  now 
figuring  out  how  expensive 
this  thing  is  and  are  starting 
to  cry  about  it,”  he  said. 

Stone  said  he  believes  that 
over  the  next  decade,  regu¬ 
lators  will  force  Basel  II  to 


HThe  thing  that 
makes  it  diffi¬ 
cult  is  that  actual 
Basel  requirements 
are  not  finalized. 


ANNELIE  SCHNAAR-CAMPBELL, 

GROUP  RISK  MANAGEMENT  DIRECTOR, 
STANDARD  BANK  GROUP  LTD. 

trickle  down  to  all  large  U.S. 
banks  and  then  to  insurance 
companies. 

“I  believe  that  it  will  be  a 
natural  evolution,”  Stone  said. 
“First  large  banks,  then  medi¬ 
um  and  small  banks,  and  then 
credit  unions.  Insurance  regu¬ 
lators  are  already  taking  no¬ 
tice  of  Basel.” 

The  Bank  for  International 
Settlements,  a  Basel,  Switzer- 
land-based  organization  in¬ 
tended  to  foster  international 
monetary  and  financial  coop¬ 
eration,  is  overseeing  devel¬ 
opment  and  implementation 
of  the  Basel  II  standards. 

From  an  IT  standpoint,  the 
proposal  calls  for  banks  to 
take  steps  such  as  developing 


rules-based  risk  management 
engines  and  knitting  together 
customer  databases  across  en¬ 
tire  enterprises.  But  compli¬ 
ance  work  has  been  more  dif¬ 
ficult  than  expected  and 
progress  is  slower  than  antici¬ 
pated,  according  to  users  and 
research  firms. 

“The  thing  that  makes  it  dif¬ 
ficult  is  where  actual  Basel  re¬ 
quirements  are  not  finalized. 
You  have  to  make  assumptions, 
for  example  with  the  risk  cal¬ 
culator,”  said  Annelie  Schnaar- 
Campbell,  director  of  group 
risk  management  at  Standard 
Bank  Group  Ltd.  in  Johannes¬ 
burg,  South  Africa. 

The  bank  is  three  years  into 
its  Basel  II  implementation 
and  is  in  the  process  of  mak¬ 
ing  enhancements  to  its  credit¬ 
writing  systems,  collateral 
management  systems,  expo¬ 
sure  and  debt-limit  manage¬ 
ment  systems,  and  loss  data 
systems.  It  is  also  implement¬ 
ing  a  new  capital  calculation 
tool,  Schnaar-Campbell  said. 

According  to  the  Accenture 
survey,  executives  at  nearly 
half  of  66  banks  interviewed 


said  they  each  expect  to 
spend  in  excess  of  $61  million 
through  2007  on  Basel  II  com¬ 
pliance,  up  from  23%  of  exec¬ 
utives  in  Accenture’s  2004 
Basel  II  survey. 

TowerGroup  in  Needham, 

Problems 
With  Basel  II 

An  Accenture  survey  of  large 
banks  found  the  following: 

■  Basel  II  compliance  is  more 
difficult  than  expected. 

■  Progress  toward  compliance 
is  slower  than  anticipated. 

■  Bankers  expect  to  spend  signif¬ 
icantly  more  funds  on  Basel  II 
compliance  compared  with  last 
year’s  estimates. 

■  Nearly  half  of  the  surveyed 
banks  plan  additional  spending 
to  realize  more  benefits  than 

“  mere  compliance. 

uj 

a:  ■  * 

\  "Seventy-nine  percent  of 
g  respondents  said  they  expect 
*  Basel  II  to  improve  their  capital 
§  positions  slightly  or  not  at  all. 
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Mass.,  estimates  that  the  U.S. 
financial  industry  will  spend 
$12  billion  by  next  year  com¬ 
plying  with  the  Basel  II  re¬ 
quirements. 

“We  figured  between  50% 
and  70%  of  the  costs  are  IT- 
related.  I  think  people  also 
underestimated  the  business 
process  and  organizational  im¬ 
pact,”  said  Andrew  Wilson,  a 
partner  for  risk  and  regulatory 
management  at  Accenture. 

Wilson  said  IT  organiza¬ 
tions  will  be  affected  by  the 
amount  of  data  that  has  to  be 
collected  to  create  accurate 
data  models  to  compute  the 
operational  risk.  They  will 
also  need  to  set  aside  capital 
to  cover  that  risk. 

IT  managers  can  expect 
their  environments  to  be  af¬ 
fected  on  several  levels.  For 
example,  they  will  have  to 
store  and  maintain  more  data 
for  longer  periods  of  time, 
standardize  data-collection 
systems,  and  roll  out  more- 
advanced  analytical  and  re¬ 
porting  tools  and  predictive 
analysis  tools,  said  Wilson. 

O  56461 
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Microsoft 

tion  $erver,  which  is  needed 
for  enterprise  team  develop¬ 
ment.  The  release  will  include 
a  so-called  Go  Live  license, 
which  will  allow  companies  to 
begin  using  the  tool  set  to 
build  and  deploy  applications, 
according  to  a  statement  from 
Soma  Somasegar,  vice  presi¬ 
dent  of  Microsoft’s  developer 
division.  The  Go  Live  license 
doesn’t  include  support  and 
patch  updates  from  Microsoft, 
according  to  the  company’s 
Web  site. 

Somasegar  did  say  that  all 
data  within  the  third  beta  ver¬ 
sion  of  the  foundation  server 
will  migrate  seamlessly  to  the 
final  version  of  the  server. 

Aaron  Zupancic,  a  Salt  Lake 
City-based  senior  software  ar¬ 
chitect  at  Experlogix  Inc.,  said 


the  delay  could  prompt  his 
company  to  push  back  the  use 
of  VS  Team  System  by  its  in¬ 
ternal  developers.  Experlogix 
plans  to  replace  the  Vault 
source-control  software  from 
SourceGear  LLC  with  Team 
System  to  help  its  dispersed 
teams  collaborate,  he  said. 

Zupancic,  also  president  of 
the  Utah  .Net  User  Group,  said 
Team  System’s  integration  with 
Microsoft’s  SharePoint  portal 
software  will  help  the  develop¬ 
ment  teams  too.  “When  creat¬ 
ing  a  new  project,  you  can  im¬ 
mediately  tie  it  to  a  SharePoint 
portal  site  and  have  team  mem¬ 
bers  share  comments  and  doc¬ 
uments,”  he  said. 

Anticipated  Interest 

Brian  Randell,  a  senior  consul¬ 
tant  at  MCW  Technologies 
Inc.,  a  consulting  firm  in  Los 
Angeles,  said  that  because  Mi¬ 
crosoft  will  be  issuing  Go  Live 


licenses  in  November,  many  of 
his  clients  can  now  begin  pilot 
projects  with  Team  System. 

Most,  he  said,  are  “chomp¬ 
ing  at  the  bit”  to  upgrade  from 


PRODUCT  DETAILS 


Visual  Studio 
2005  Team 
System 

Access  to  .Net  Framework  2.0 
and  support  for  building  tools  that 
extend  the  Visual  Studio  integrat¬ 
ed  development  environment. 

Virtual  designers  let  architects, 
operations  managers  and  devel¬ 
opers  design  service-oriented 
applications  that  can  be  validated 
against  operational  environments. 

Advanced  load  testing  to  en¬ 
able  teams  to  verify  performance 
of  application  before  deployment. 

Team  Foundation  Server  allows 
dispersed  teams  to  manage  and 
track  the  progress  of  projects. 


Microsoft’s  Visual  SourceSafe 
source-control  tools  to  VS 
Team  System  because  of  its 
advanced  reporting  capabili¬ 
ties  and  metrics  features. 

Melinda-Carol  Ballou,  an  an¬ 
alyst  at  market  research  firm 
IDC,  said  vendors  such  as  Mi¬ 
crosoft  are  targeting  corporate 
users’  emerging  need  to  better 
manage  extended  develop¬ 
ment  teams  while  adhering  to 
increasingly  rigid  regulatory 
and  compliance  policies. 

Some  users,  meanwhile, 
are  ramping  up  other  tools  to 
better  manage  development 
teams.  TextWise  LLC,  a  build¬ 
er  of  text-processing  tools  in 
Rochester,  N.Y.,  began  using 
an  enterprise  blogging  tool  in 
April  from  Traction  Software 
Inc.  to  replace  e-mail  threads 
for  collaboration. 

The  TeamPage  blog  soft¬ 
ware  allows  the  company’s  de¬ 
velopment  teams  in  Rochester, 


Baltimore,  Boston  and  Syra¬ 
cuse,  N.Y.,  to  post  design  notes 
and  status  reports,  said  Rob 
Rubin,  TextWise’s  chief  tech¬ 
nology  officer. 

To  date,  the  company  has 
had  1,200  blog  postings,  and 
this  month  it  was  able  to  avoid 
a  30-day  setback  to  the  devel¬ 
opment  cycle  because  one 
group  noticed  a  planned  test¬ 
ing  duplication  on  the  blog, 
Rubin  added. 

Thomson  Elite,  which  pro¬ 
vides  software  to  law  firms, 
uses  Borland  Software  Corp.’s 
Star  Team  configuration  man¬ 
agement  tools  for  its  200  de¬ 
velopers  in  teams  in  Turkey, 
New  Zealand  and  several  U.S. 
locations. 

Since  it  began  using  the 
system  several  years  ago,  the 
group  has  improved  its  pro¬ 
ductivity  by  about  35%,  said 
Adina  Kram,  Thomson’s  re¬ 
lease  coordinator.  ©  56458 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 

Network  Effect 


a 


I  WORK  FOR  A  HOSPITAL  management  company  in  the 
Midwest  that  works  with  30  very  small  rural  communi¬ 
ty  hospitals.  Not  one  of  our  hospitals  is  ready  for  elec¬ 
tronic  health  records.  They  are  not  even  close  to  giving 
up  paper.  I  guarantee  you  there  are  more  hospitals  that 
do  not  have  EHR  than  those  that  do.” 

This  network  manager  who  wrote  to  me  is  right.  When  I  said  a 
few  weeks  back  [QuickLink  55837]  that  “hospitals  have  made  the 
transition  over  the  past  decade”  to  EHR,  I  was  wrong.  True,  many 
large  health  care  organizations  have  put  EHR  in  place.  But  the  rest  of 
the  health  care  world  has  a  big  challenge  ahead. 


Wait,  check  that:  A  better  way  to  say  it  is 
that  because  many  doctors  and  small  hospitals 
aren’t  using  EHR,  everyone  in  health  care  faces 
a  big  challenge. 

Why?  It’s  the  network  effect.  Remember  Met¬ 
calfe’s  Law:  The  more  users  who  can  communi¬ 
cate  with  one  another  on  a  network,  the  more 
valuable  the  network  is. 

Sure,  EHR  can  save  some  money  internally 
for  each  organization  that  implements  it.  But 
the  big  value  comes  when  lots  of  organizations 
can  exchange  medical  records  efficiently. 

And  the  lack  of  widespread  use  of  EHR  actu¬ 
ally  adds  cost  for  organizations  that  use  it. 
Every  time  one  of  those  small  community  hos¬ 
pitals  sends  a  patient  to  a  big  health  care  orga¬ 
nization  with  actual  paperwork,  that  paper  has 
to  be  converted  to  electronic  records.  Then  the 
EHR  has  to  be  printed  on  paper  again  for  the 
patient’s  file  when  he  goes  back  home. 

That  means  we  can’t  treat  EHR  as  a  competi¬ 
tive  advantage  that  we  keep  for  ourselves.  We 
have  to  spread  it  around  as  widely  as  possible. 
Otherwise  we  can’t  realize  the  biggest  benefits 
—  including  the  largest  cost  savings. 

That’s  not  unique  to  EHR.  For  ex¬ 
ample,  no  company  can  get  maxi¬ 
mum  advantage  alone  from  RFID; 
everyone  on  the  supply  chain  has  to 
use  it.  And  Internet  retailing  only 
works  when  all  customers  and  sup¬ 
pliers  use  the  same  Web  protocols. 

But  that’s  not  the  way  we’re  used 
to  thinking  about  IT’s  benefits.  And 
it’s  not  the  way  we  usually  sell  new 
IT  initiatives  to  top  management. 

It’s  one  thing  to  say,  “We  need  to 
adopt  this  technology  to  get  an  ad¬ 
vantage  over  the  rest  of  our  indus¬ 


try.”  It’s  quite  another  to  argue,  “We  need  to  get 
the  rest  of  our  industry  to  adopt  this  technolo¬ 
gy  so  we  can  maximize  our  benefit  from  it.” 

In  the  case  of  EHR,  it’s  especially  sticky: 
These  are  patients,  not  products,  so  there’s  no 
chance  of  a  Wal-Mart-style  “adopt  this  or  we 
won’t  buy  from  you”  ultimatum. 

But  big  health  care  organizations  still  have  a 
big  interest  in  getting  small  hospitals,  clinics 
and  medical  practices  on  board  with  EHR.  It’s 
the  only  way  to  get  a  big-time  payback  from 
their  own  EHR  spending. 

Making  that  happen  won’t  be  easy.  The  costs 
of  software,  hardware,  implementation,  training 
and  running  the  systems  aren’t  trivial.  Distrib¬ 
uting  less-expensive  EHR  software  like  Vista- 
Office  is  a  start,  but  more  will  need  to  be  done. 

For  big  health  care  players,  will  that  mean 
contributing  improvements  to  the  Vista-Office 
software?  Partnering  with  small  hospitals  to 
train  IT  and  medical  staff?  Donating  equip¬ 
ment?  Lobbying  for  the  health  care  equivalent 
of  the  Rural  Electrification  Act? 

I  don’t  know.  But  short  of  a  real  push,  big 

health  care  organizations  won’t  get 
the  ROI  they  want  from  EHR.  And 
as  that  network-manager  reader 
put  it,  “those  that  do  not  have  EHR 
will  not  be  ready  in  the  next  few 
years  —  or  the  next  10  years.” 

Incidentally,  in  response  to  read¬ 
ers  who  asked  where  to  find  Vista- 
Office  EHR  and  the  open-source 
OpenVista,  try  the  Vista-Office 
Web  site  ( www.vista-office.org )  and 
WorldVista  ( www.worldvista.org ). 
OpenVista  is  available  now;  Vista- 
Office  EHR  is  still  scheduled  to  be 
out  this  month.  ©  56431 


frank  haves  Computer- 
world's  senior  news  colum¬ 
nist,  has  covered  IT  for  more 
than  20  years.  Contact  him  at 

frank.hayes@computerworld.com. 


You  Win  Some,  You  Lose  Some 

For  weeks  after  new  servers  are  installed,  this  com¬ 
puter  room  can’t  stay  cool.  “The  plant  engineer  in¬ 
stalled  a  red  warning  light  so  we  could  see  if  the  tem¬ 
perature  exceeded  78  degrees,  and  it  was  always  on,” 
says  a  sysadmin  pilot  fish.  “I  pointed  it  out  for  weeks, 
expecting  them  to  do  something.  Finally  the  li§|§vas 
out,  and  I  thanked  them  for  fixing  the  cooling  problem. 
No  problem,  they  answered,  glad  we  finally  got  it  fixed 
for  you.”  But  next  day  it's  hotter  than  ever  -  and  the 
red  light  is  still  off.  “It  wasn’t  fixed,”  sighs  fish  after  in¬ 
vestigating.  “The  light  bulb  had  just  burned  out” 


Don’t  Ask 

Edict  comes 
down  from 
management: 

All  workstations 
must  be  set  to  lock  up 
after  15  minutes  of  in¬ 
activity.  That’s  inconve-  ; 
nient  for  this  pilot  fish 
and  his  group,  whose 
members  often  leave 
their  desks  for  short  pe-  j 
riods.  “One  of  my  co¬ 
workers  challenged  our  j 
local  IT  admin  to  show 
him  where  in  the  corpo-  j 
rate  policy  manual  this 
rule  was  stated,”  says 
fish.  Admin  dutifully 
tracks  it  down  and,  sure  j 
enough,  there’s  no  15- 
minute  rule.  Sighs  fish, 
“The  official  rule  was 
10  minutes.” 

Timinq  Is 
Everything 

Help  desk  pilot  fish 
needs  data  on  a  particu-  j 
lar  user’s  hard  drive  at  a  j 
remote  site,  so  he  heads  = 
off  to  fetch  the  unit.  Not  j 
very  long  afterward,  the  j 
same  user  phones  the 
help  desk  about  a  differ-  j 
ent  problem  and  asks  for  j 
fish  by  name.  Sorry,  he's  j 
not  here,  tech  tells  her. 
She  hangs  up,  turns 
around  -  and  there’s 
fish,  standing  in  her 
doorway.  Surprised  user:  I 
“Wow!  You  help  desk 
people  are  good\" 


Can  You 
Give  Us 
A  Hint? 

User’s  plea  to 
support  pilot 
fish,  in  its  entirety:  “I 
deleted  something  from 
my  desktop  -  I’m  not 
sure  what.  I  was  trying 
to  delete  something  and 
I  deleted  whatever  this 
was  instead.  You  can  see 
the  empty  space  be¬ 
tween  Microsoft  Word 
and  Microsoft  Access.  It 
must  have  been  some¬ 
thing  I  needed,  or  else 
it  wouldn’t  have  been 
there,  but  I’m  at  a  loss 
for  what  it  was.  Is  there 
any  way  you  can  get  it 
back  for  me  without 
knowing  what  it  was? 
Thanks!” 

What  a  Concept! 

After  user’s  hard  drive  is 
replaced,  she  remem¬ 
bers  a  file  that  wasn’t 
transferred  to  the  new 
disk  -  and  it  has  infor¬ 
mation  she  needs.  “She 
knew  the  old  one  went 
to  a  storage  room  full  of 
drives,”  says  a  pilot  fish 
on  the  scene.  “But  when 
she  asked  us  to  retrieve 
it,  we  did  so  in  a  few 
moments.”  Amazed 
user:  How  did  you  find 
my  old  drive  so  quickly 
in  that  hard-disk  grave¬ 
yard?  Fish:  “We  put  your 
name  on  it.” 


SHARK 

TANKv 


O!  WONT  PUT  YOUR  NAME  ON  IT.  Send  me  your 
true  tale  of  IT  life  at  sharky@computerworld.com. 

You’ll  score  a  sharp  Shark  shirt  if  I  use  it.  And  check  out  the 
daily  feed,  browse  the  Sharkives  and  sign  up  for  Shark  Tank 
home  delivery  at  computerworld.com/sharky. 


Squander 


DB2.  ONLY  THE  PERFORMANCE  IS  HIGH. 

DB2  has  done  it  again.  According  to  a  Market  Magic  Study, 
DB2  costs  “on  average  22%  less  than  Oracle.’’1 

The  Transaction  Processing  Performance  Council  results 
show  that  DB2  and  eServer™  p5-595  are  more  than  twice 
as  scalable  as  Oracle  Real  Application  Clusters,  making 
them  the  overwhelming  performance  and  scalability 
leader  for  TPC-C.2  And  an  ITG  study  showed  overall  costs 
for  Oracle  Database  up  to  four  times  higher  than  DB2.3 

No  wonder  DB2  is  regarded  as  the  leading  database  built 
on  and  optimized  for  Linux!  UNIX*  and  Windows!  Like 
other  IBM  database  engine  products  such  as  Informix* 
and  CloudscapeT  DB2  is  part  of  an  innovative  family  of 
information  management  products  that  integrates  and 
can  actually  add  insight  to  your  data. 


It  takes  full  advantage  of  your  existing  heterogeneous 
and  open  environments,  while  its  leading-edge 
autonomic  computing  technology  means  increased 
reliability,  increased  programmer  productivity  and 
decreased  deployment  and  management  costs. 

One  more  thing:  Oracle  desupported  Oracle  Database  8i 
last  year,  meaning  potential  headaches,  higher  cost  or 
a  complete  migration  to  current  versions  of  Oracle. 
Fortunately,  IBM  offers  ongoing,  around-the-clock  service 
and  support  for  DB2. 

Why  not  move  up  to  middleware  that  makes  sense?  Now  you 
can  get  IBM  DB2  Universal  Database  or  Informix  by  taking 
advantage  of  our  extremely  compelling  trade-up  program. 
Visit  ibm.com/db2/swap  today  to  find  out  if  you  qualify. 


JjJJ  DEMAND  BUSINESS 


IBM.  the  IBM  logo,  DB2,  eServer,  Informix,  Cloudscape  and  the  On  Demand  logo  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United 
States  and  other  countries.  Linux  is  a  registered  trademark  of  Linus  Torvalds.  Microsoft  and  Windows  are  registered  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other 
countries.  UNIX  is  a  registered  trademark  of  The  Open  Group  in  the  United  States  and/or  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks 
of  others.  ©2005  IBM  Corporation.  All  rights  reserved.  '“Database  Comparative  Cost  of  Ownership,"  January  2003,  Market  Magic  Ltd.  !AII  referenced  results  are  current  as  of  12/14/04.  DB2 
UDB  vS.2  on  IBM  eServer  p5  595  (64-way  POWER5  1.9  GHz)  and  AIX  5.3L:  3,210,540  tpmC  @  $5.19/tpmC  available:  May  15,  2005,  vs.  Oracle  RAC  lOg  on  HP  Integrity  rx5670  Cluster  64P 
(16  x  4-way  Intel  Itanium2  6M  1.5GHz):  1,184,893  tpmC  @  $5.52/tpmC  available:  April  30, 2004;  TPC  Benchmark,  TPC-C,  tpmC  are  trademarks  of  the  Transaction  Processing  Performance 
Council.  For  further  TPC-related  information,  please  see  http://www.tpc.org/.  "“IBM  Solutions  for  PeopleSoft  Deployment  in  Mid-sized  Businesses  Quantifying  the  New  Cost/Benefit  Equation,” 
July  2003.  International  Technology  Group.  Los  Altos,  California. 


NETWORK 


EXPERTISE 

The  largest  and  fastest  Our  people  and  partners 

national  wireless  data  network.  make  wireless  work  for 
The  largest  U.S.  provider  on  more  businesses  than  any 
the  global  standard.  other  wireless  carrier. 


APPLICATIONS 

The  broadest  and  deepest 
portfolio  of  wireless 
business  solutions. 


SERVICE 

24/7  enterprise-grade 
support.  And  a  service 
staff  dedicated  solely 
to  business  people. 


rea  time 


gets  Corporate 


Express  there  in  no  time. 


With  its  24/7  dedicated  business 
service  team,  Cingular  gave 
Corporate  Express  the  support, 
training,  and  technology  needed 
to  migrate  from  a  paper-based 
delivery  system  to  a  real-time 
wireless  solution.  From  system 
installation  and  operation  to 
employee  training,  the  Cingular 
service  team  ensured  a  seamless 
transition  to  the  ALLOVER™  network,  the  largest  digital  voice  and 
data  network  in  America.  For  the  leader  in  office  supplies,  Cingular 
increased  driver  productivity  while  reducing  administrative  costs. 


CINGULAR  MAKES  BUSINESS  RUN  BETTER 


X  cingular 

raising  the  barr.iill 

Find  out  how  Cingular  can  make  your  business  run  better: 

CALL  your  account  representative  -or-  CLICK  cinguiar.com/businessleader 


Circular's  ALLOVER  data  network  covers  over  250  million  people  and  is  growing. 

Coverage  is  not  available  in  all  areas.  Global  coverage  based  on  coverage  in  174  countries.  Fastest  claim  compares  Cingular’s  measured  speed  of  its  EDGE 
network  to  other  carriers’  speed  claims  for  their  national  data  networks.  All  marks  property  of  their  respective  owners.  ©2005  Cingular  Wireless.  All  rights  reserved. 


